CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Design/Logic Flaw

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

CVE-2017-12580 affects IDM UltraEdit up to 24.10.0.32. The vulnerability is a DLL preloading issue: on unpatched Windows systems, placing a DLL named like a Windows DLL (e.g., ntmarta.dll) in the same directory as the affected installer EXE causes the preloaded DLL in the executable’s current dir...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Important: Red Hat Bug Fix Advisory: idm:DL1 bug fix update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Bug Fixes: IPA upgrade fails for latest ipa package when adtrust is installed BZ1773516...

ALBA-2019:4268 idm:DL1 bug fix update

Bug Fixes: IPA upgrade fails for latest ipa package when adtrust is installed BZ1773516...

idm:client bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2019:3463 idm:client bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

idm:DL1 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2019:3348 idm:DL1 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

StrongPity APT Returns with Retooled Spyware

UPDATE The APT group behind the sophisticated malware known as StrongPity a.k.a. Promethium has mounted a fresh spyware campaign that is still ongoing as of July 2019. The group has retooled with new malware to control compromised machines, according to researchers. “The new malware samples first...

CVE-2019-0301

Technical details (affected product/versions, root cause, impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2017-9284

IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...

Information disclosure

IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...

CVE-2017-9284

Affected product/version: Micro Focus IDM Identity Applications (IDM 4.6 Identity Applications) before 4.6.2.1. Vulnerability type / impact: Information disclosure; may expose sensitive information. Root cause / nature (as stated): IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensiti...

CVE-2017-9284 IDM 4.6 Identity Applications information leakage

IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...

Design/Logic Flaw

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

CVE-2016-9575

CVE-2016-9575 concerns an insufficient permission check in IPA’s certprofile-mod command. Affected products/versions include IPA 4.2.x, 4.3.x before 4.3.3, and 4.4.x before 4.4.3. An authenticated, unprivileged attacker could modify certificate profiles, enabling issuance of certificates with arb...

CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...