Countdown to GDPR: Get 20/20 Visibility Into Your IT Assets

Anyone questioning the importance of IT asset visibility in an organization’s security and compliance postures ought to review the EU’s General Data Protection Regulation GDPR, which goes into effect next year. With the severe requirements the GDPR places on how a business handles the personal da...

twinpineautogroup.com XSS vulnerability

Vulnerable URL: http://www.twinpineautogroup.com/inventory.asp?highPrice=1/-///'/"//--...

idedealerships.com XSS vulnerability

Vulnerable URL: http://www.idedealerships.com/inventorySearch.asp?new=1/-///'/"//--...

FAQ: XenMobile Per App VPN

Can Per App VPN be configured for MAM only devices No, Per App VPN does not support MAM only devices. With the iOS per app-VPN feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed iOS device. There, you can establish an on-demand VPN tunnel to th...

CVE-2017-6885

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges...

CVE-2017-6885

CVE-2017-6885 affects Flexera Software FlexNet Manager Suite (FlexNet Inventory Agent and FlexNet Beacon); vulnerable versions include 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1. Cause: an error in handling certain external commands and services that can be exploited to gain elevated pri...

CVE-2017-6885

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges...

IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

CVE-2016-8962

IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...

CVE-2016-8962

IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...

Design/Logic Flaw

IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...

CVE-2016-8962

IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...

CVE-2016-8962

CVE-2016-8962 affects IBM BigFix Inventory v9.x and IBM License Metric Tool v9.x. Root cause: the password strength policy is not enforced by default, making it easier for attackers to compromise user accounts. The IBM bulletin confirms the vulnerability in both products and provides a remediatio...

fipart.com XSS vulnerability

Vulnerable URL: https://www.fipart.com/inventory-app/index.php?idCompany=3174 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1793139 VIP website status:| No Check fipart.com SSL...

Error: "Personal vDisk Inventory Is Not Up To Date. Update the Inventory in the Master Image, And Then Try Again" In Studio

New deployed target device shows "Personal vDisk inventory is not up to date. Update the inventory in the master image, and then try again." in studio...

IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven

A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...

CVE-2017-7237

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

CVE-2017-7237

The connected sources confirm CVE-2017-7237 affects Spiceworks Inventory 7.5’s TFTP server. An unauthenticated TFTP service on UDP port 69 allows remote attackers to access the Spiceworks data\configurations directory via a WRQ operation, with the CNVD entry noting potential file overwrite/upload...

Spiceworks 7.5 TFTP Improper Access Control File Overwrite / Upload

Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt + ISR: APPARITIONSEC Vendor: ================== www.spiceworks.com Product: ================= Spiceworks - 7.5 Provides...

List of hotfixes and updates that are contained in System Center Configuration Manager 2007 Service Pack 2

Lists Microsoft Knowledge Base KB articles that describe the hotfixes and updates that are contained in Microsoft System Center Configuration Manager 2007 Service Pack 2 SP2.INTRODUCTIONThis article lists Microsoft Knowledge Base KB articles that describe the hotfixes and updates that are contain...