New Relic: User to Admin privilege escalation in Infrastructure Conditions - /v2/accounts/1835740/alerts/conditions

Details The endpoints POST /v2/accounts/:accountid/alerts/conditions create new and PUT /v2/accounts/:accountid/alerts/conditions/:conditionid update existing on infrastructure-alert.service.newrelic.com are vulnerable to privilege escalation. As per the screenshot below, an account with regular...

The vulnerability of the Unified Infrastructure Manager, a monitoring program for IT infrastructure, allows a perpetrator to bypass the authentication process through the LDAP service.

The vulnerability of the Unified Infrastructure Manager’s IT-infrastructure monitoring software exists due to an error in the access management subsystem. Exploiting this vulnerability allows a malicious actor to bypass the authentication process through the LDAP service, by providing only the...

EMC Unified Infrastructure Manager/Provisioning authentication bypass

Authentication bypass if LDAP authentication is used...

Authentication flaw

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...