Product update: Virtuozzo 7.0 Update 12 Hotfix 1 (7.0.12-338)

The Hotfix 1 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.4.2.vz7.116.7. Vulnerability id: PSBM-100079, PSBM-100093 VMs with inconsistent bitmaps could not be migrated. Vulnerability id: PSBM-100158 Kernel memory leak on VM st...

Citrix Hypervisor Security Update

Description of Problem A number of vulnerabilities have been found in Citrix Hypervisor formerly Citrix XenServer that may: i. Allow the host to be compromised by privileged code in a PV guest VM, ii. allow unprivileged code in a HVM guest VM to cause that guest to crash and iii. under certain...

Important product security update: Virtuozzo 6.0 Update 12 Hotfix 49 (6.0.12-3754)

This update provides a security and a stability fix. Vulnerability id: CVE-2019-15681, PSBM-99817 libVNCServer-0.9.10 contains a memory leak in VNC server code, which may allow an attacker to read stack memory...

Security Advisory 0044

Security Advisory 0044 PDF Date: December 4th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 4, 2019 | Initial Release The CVE-ID tracking this issue is: CVE-2019-18181 CVSSv3 Base Score: 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Description: This advisory document...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...

CVE-2019-19019

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is...

CVE-2019-6675

BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific...

Potential data loss during Export Backup retention processing

Challenge In the environments using scale-out backup repository, Export Backup retention logic may delete the entire repository folder, if the required exported backup file has already been deleted manually prior to its set retention policy expiration. This issue affects Veeam Backup & Replicatio...

CVE-2019-6142

It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix in order to remediate this issue...

Design/Logic Flaw

It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix in order to remediate this issue...

CVE-2019-6142

It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix in order to remediate this issue...

CVE-2019-6142

The CVE-2019-6142 entry concerns Forcepoint Email Security, specifically versions 8.5 through 8.5.3, where a cross-site scripting (XSS) vulnerability exists. The connected documents describe a web-application flaw that lacks proper validation of client-side data, enabling potential client-side co...

PT-2019-17977 · Forcepoint · Forcepoint Email Security

Name of the Vulnerable Software and Affected Versions: Forcepoint Email Security versions 8.5 through 8.5.3 Description: A reported issue allows for cross-site scripting XSS in the software. Recommendations: For Forcepoint Email Security versions 8.5 through 8.5.3, apply the relevant hotfix to...

One Identity Cloud Access Manager Cross-Site Request Forgery Vulnerability

One Identity Cloud Access Manager CAM is a Web-based access management solution from US-based One Identity. The product supports single sign-on, multi-factor authentication, access control and auditing. A cross-site request forgery vulnerability exists in One Identity CAM versions prior to 8.1.4...

Cross site request forgery (csrf)

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

Product update: Virtuozzo 6.0 Update 12 Hotfix 47 (6.0.12-3751)

This update provides a stability and usability fix. Vulnerability id: PSBM-48818 prlbackupclient could continue running even after prlbackupserver had exited. This could prevent further backups from being created...

Security Advisory 0042

Security Advisory 0042 PDF Date: October 9th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 9th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2019-14810. CVSSv3 Base Score: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Description This advisory is to document a...

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Product update: Virtuozzo 7.0 Update 11 Hotfix 2 (7.0.11-304)

The Hotfix 2 for Virtuozzo 7.0.11 fixes a usability issue. Vulnerability id: PSBM-98041 Firewalld failed to start in a CentOS 7.7 container due to a firewalld patch that changed how 'nfconntrack' was loaded...

Incorrect Replica Counters in Monthly Cloud Connect License Usage Report

Challenge Automated monthly license usage reports generated by Veeam Cloud Connect display an unexpected number of replicated VMs and licensed instances. At the same time, Get-VBRCloudTenant -Name "TenantName" PowerShell cmdlet returns proper numbers. Cause Miscalculations are caused by a bug in...