11413 matches found
Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by information disclosure vulnerability (CVE-2017-1126)
Summary IBM Integration Bus and WebSphere Message Broker have addressed the vulnerability that would allow an unauthorized user to obtain sensitive information about software versions, and which could lead to further attacks. Vulnerability Details CVEID: CVE-2017-1126 DESCRIPTION: IBM Integration...
Security Bulletin: IBM Integration Bus affected by Apache Tomcat (core only) vulnerability CVE-2018-11784
Summary IBM Integration Bus is affected by an Apache Tomcat vulnerability which was reported and has been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2018-11784 DESCRIPTION: Apache Tomcat could allow a remote attacker to conduct phishing attacks, caused by ...
Security Bulletin: WebSphere Message Broker and IBM Integration Bus is affected by Open Source Apache Tomcat Vulnerabilities (CVE-2017-12617,CVE-2017-12615)
Summary WebSphere Message Broker and IBM Integraton Bus have addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2017-12617 DESCRIPTION: Apache Tomcat could allow a remote attacker to execute arbitrary code on the system, caused by an incomplete fix related to an error when...
Security Bulletin:IBM Integration Bus is affected by deserialization RCE vulnerability in IBM WebSphere JMS Client
Summary WebSphere MQ V9.0 libraries are shipped in IBM Integration Bus and hence IBM Integration Bus is vulnerable to IBM WebSphere MQ JMS client deserialization RCE vulnerability. Vulnerability Details CVEID: CVE-2016-0360 DESCRIPTION: IBM Websphere MQ JMS client provides classes that deserializ...
Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by denial of service vulnerability (CVE-2014-8901)
Summary WebSphere Message Broker and IBM Integration Bus are affected by denial of service vulnerability. Pattern matching while validating a specially crafted XML document causes XML4C to consume 100% CPU Vulnerability Details CVEID: CVE-2014-8901 DESCRIPTION: IBM XML4J and XML4C libraries conta...
XenMobile - Moving from LDAP to LDAPS
I am planning to turn on LDAPS on our XenMobile servers in the DMZ. We are being sure to open port 636 from our firewall to allow proper LDAPS traffic to flow. I understand there is one additional step to be performed prior to making the switch. I believe I need to export the root certificate fro...
CVE-2020-10819
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
CVE-2020-10819
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
CVE-2020-10820
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...
Cross site scripting
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
CVE-2020-10819
CVE-2020-10819 affects Nagios XI 5.6.11 with a cross-site scripting (XSS) vulnerability in the web interface, specifically via the includes/components/ldap_ad_integration/ username parameter. The root cause is lack of proper validation of client-side data by the WEB application, according to mult...
GitHub personal access token leaking into temporary EasyBuild (debug) logs
Impact The GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --from-pr, etc. is shown in plain text in EasyBuild debug log files. Scope: the log message only appears in the top-level log file, not in the individual software installation logs see...
GHSA-2WX6-WC87-RMJM GitHub personal access token leaking into temporary EasyBuild (debug) logs
Impact The GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --from-pr, etc. is shown in plain text in EasyBuild debug log files. Scope: the log message only appears in the top-level log file, not in the individual software installation logs see...
CVE-2020-5262
In EasyBuild before version 4.1.2, the GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --fro,-pr, etc. is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the...
CVE-2020-5262
In EasyBuild before version 4.1.2, the GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --fro,-pr, etc. is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the...
CVE-2020-5262
CVE-2020-5262 affects EasyBuild prior to v4.1.2, where the GitHub Personal Access Token (PAT) used by GitHub integration features is written in plain text to EasyBuild debug log files. This disclosure vulnerability is fixed in EasyBuild v4.1.2 and in the master/develop branches of the easybuild-f...
Evaluating EPP in the Time of XDR
The endpoint detection and response EDR market is not only more critical than ever, it is also going through the biggest period of innovation in its history – bigger than when EDR was first introduced by Carbon Black 7 years ago. This next wave of innovation is about extending EDR beyond the...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11.
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8.0.5.41 & Versions 7.0.10.50 used by IBM Integration Bus & IBM App Connect Enterprise v11. These issues were disclosed as part of the IBM Java SDK updates in Oct 2019 Vulnerability Details CVEID: CVE-2019-29...
