RHSA-2008:0191 Red Hat Security Advisory: redhat-idm-console security update

Bulletin has no description...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.6), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.6) +14 more potentially affected by CVE-2024-27439 via org.apache.wicket:wicket (>=9.11.0, <=9.16.0)

org.apache.wicket:wicket MAVEN version =9.11.0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6 - org.apache.syncope.e...

Code injection

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...

CVE-2008-0889: Undefined Security Weakness

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...