113 matches found
JGroups: Authorization bypass
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information...
HackerOne: Possible CSRF during joining report as participant
Hi, I think i found a possible csrf issue with joining report as participant endpoint, Actually one of the bug got duplicated and the company added me into the original bug as a participant. then, I got invitation from hackerone to joing the report. After opening the invitation link, there was tw...
How to manually join a new Controller to an existing site
Joining a new controller to an existing site...
Coalfire goes to Washington!
Our CEO Larry Jones visited The White House Thursday morning to join with First Lady Michelle Obama and Dr. Biden in the celebration of the Joining Forces initiatives fifth-year anniversary and announce Coalfires pledge to hire and train veterans and military spouses...
[SECURITY] Fedora 21 Update: realmd-0.15.2-2.fc21
realmd is a DBus system service which manages discovery and enrollment in r ealms and domains like Active Directory or IPA. The control center uses realmd as the back end to 'join' a domain simply and automatically configure things corre ctly...
PT-2014-3777
Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote authenticated users to bypass authorization checks. This can lead to two main consequences: 1 joining arbitrary meetings, and 2 terminating a meeti...
ipa security update
CentOS Errata and Security Advisory CESA-2013:0188 Updated ipa packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score...
CVE-2011-3620
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...
Design/Logic Flaw
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...
CVE-2011-3620
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...
samba and cifs-utils security and bug fix update
cifs-utils: 4.8.1-2.2 - fix handling of checknewline return code in mount.cifs bz 725508 4.8.1-2.1 - mount.cifs: handle ENOSPC/EFBIG condition when altering mtab bz 725508 samba: 3.5.6-86.4 - Fix cleartext authentication after applying Windows security patch KB2536276 - resolves: 728517 3.5.6-86....
