11412 matches found
Security Bulletin: IBM Integration Bus is affected by Web UI security vulnerability (CVE-2017-1694)
Summary IBM Integration Bus has addressed the following vulnerability Vulnerability Details CVEID: CVE-2017-1694 DESCRIPTION: IBM Integration Bus transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. CVSS Base Score: 5.9 CVSS Tempor...
Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by information disclosure vulnerability (CVE-2017-1126)
Summary IBM Integration Bus and WebSphere Message Broker have addressed the vulnerability that would allow an unauthorized user to obtain sensitive information about software versions, and which could lead to further attacks. Vulnerability Details CVEID: CVE-2017-1126 DESCRIPTION: IBM Integration...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect WebSphere Message Broker and IBM Integration Bus ( CVE-2016-2107,CVE-2016-2176)
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. The DataDirect ODBC Drivers used by WebSphere Message Broker and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote...
Security Bulletin: IBM Integration Bus affected by Apache Tomcat (core only) vulnerability CVE-2018-11784
Summary IBM Integration Bus is affected by an Apache Tomcat vulnerability which was reported and has been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2018-11784 DESCRIPTION: Apache Tomcat could allow a remote attacker to conduct phishing attacks, caused by ...
XenMobile - Moving from LDAP to LDAPS
I am planning to turn on LDAPS on our XenMobile servers in the DMZ. We are being sure to open port 636 from our firewall to allow proper LDAPS traffic to flow. I understand there is one additional step to be performed prior to making the switch. I believe I need to export the root certificate fro...
CVE-2020-10819
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
CVE-2020-10820
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...
CVE-2020-10819
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
Cross site scripting
Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...
CVE-2020-10819
CVE-2020-10819 affects Nagios XI 5.6.11 with a cross-site scripting (XSS) vulnerability in the web interface, specifically via the includes/components/ldap_ad_integration/ username parameter. The root cause is lack of proper validation of client-side data by the WEB application, according to mult...
GitHub personal access token leaking into temporary EasyBuild (debug) logs
Impact The GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --from-pr, etc. is shown in plain text in EasyBuild debug log files. Scope: the log message only appears in the top-level log file, not in the individual software installation logs see...
GHSA-2WX6-WC87-RMJM GitHub personal access token leaking into temporary EasyBuild (debug) logs
Impact The GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --from-pr, etc. is shown in plain text in EasyBuild debug log files. Scope: the log message only appears in the top-level log file, not in the individual software installation logs see...
CVE-2020-5262
In EasyBuild before version 4.1.2, the GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --fro,-pr, etc. is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the...
CVE-2020-5262
In EasyBuild before version 4.1.2, the GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --fro,-pr, etc. is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the...
CVE-2020-5262
CVE-2020-5262 affects EasyBuild prior to v4.1.2, where the GitHub Personal Access Token (PAT) used by GitHub integration features is written in plain text to EasyBuild debug log files. This disclosure vulnerability is fixed in EasyBuild v4.1.2 and in the master/develop branches of the easybuild-f...
Evaluating EPP in the Time of XDR
The endpoint detection and response EDR market is not only more critical than ever, it is also going through the biggest period of innovation in its history – bigger than when EDR was first introduced by Carbon Black 7 years ago. This next wave of innovation is about extending EDR beyond the...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11.
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8.0.5.41 & Versions 7.0.10.50 used by IBM Integration Bus & IBM App Connect Enterprise v11. These issues were disclosed as part of the IBM Java SDK updates in Oct 2019 Vulnerability Details CVEID: CVE-2019-29...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Advanced scanner for CVE-2020-0796 - SMBv3 RCE using...
