Default credentials

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

CVE-2014-8733

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

CVE-2014-8733

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

CVE-2014-8733

The CVE-2014-8733 entry concerns Cloudera Manager 5.2.0/5.2.1/5.3.0 in which the LDAP bind password is stored in plaintext in unspecified world-readable files under /etc/hadoop, enabling local attackers to obtain the password. The connected documents provide this exact vulnerability description; ...

Graylog2 LDAP Authentication Bypass Vulnerability

The remote version of Graylog2 is affected by a vulnerability that allows remote attackers, using crafted wildcards, to bypass the authentication mechanisms when the installation is configured to use LDAP authentication. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Apache ActiveMQ LDAP Authentication Bypass Vulnerability

Apache ActiveMQ is an open source message bus that supports JMS1.1 and J2EE 1.4 specification of the JMS Provider implementation . Apache ActiveMQ is configured to support LDAP servers with unauthenticated authentication mechanisms. A vulnerability in the LDAPLoginModule implementation provided b...

Important: Red Hat Security Advisory: Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 security update

Fuse ESB Enterprise/MQ Enterprise 7.1.0 R1 P8 Patch 8 on Rollup Patch 1, which fixes two security issues, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...

CVE-2014-9043

The userldap aka LDAP user and group backend application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind...

CVE-2014-9043

CVE-2014-9043 affects ownCloud’s user_ldap backend: a null byte in the password with a valid username enables an unauthenticated bind, bypassing authentication. Affected are ownCloud releases prior to 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3. Multiple sources (SUSE/Mandriva advisories and C...

FortiAuthenticator v300 build 0007 Multiple Vulnerabilities

Fortinet FortiAuthenticator suffers from subshell bypass, cross site scripting, password disclosure, and file disclosure vulnerabilities. Fortinet FortiAuthenticator Multiple Vulnerabilities Affected Versions: Verified on FortiAuthenticator v300 build 0007 +-------------+ | Description |...

Fortinet FortiAuthenticator XSS / Disclosure / Bypass

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Fortinet FortiAuthenticator Multiple Vulnerabilities Affected Versions: Verified on FortiAuthenticator v300 build 0007 PDF:...

openSUSE Security Update : roundcubemail (openSUSE-SU-2015:0116-1)

roundcubemail was updated to 1.0.4 fixing bugs and security issues. Changes : - Disable TinyMCE contextmenu plugin as there are more cons than pros in using it 1490118 - Fix bug where showrealfoldernames setting wasn't honored on compose page 1490153 - Fix issue where Archive folder wasn't...

CAS Server 3.5.2 LDAP Authentication Bypass Vulnerability

CAS Server version 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards. CVE-2015-1169 - CAS Server 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards. Reporter: José Tozo =====Table of Contents================================== 1...

CAS Server 3.5.2 LDAP Authentication Bypass

=====Alligator Security Team - Security Advisory======== CVE-2015-1169 - CAS Server 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards. Reporter: José Tozo =====Table of Contents================================== 1. Background 2. Detailed description 3. Other contex...

CVE-2015-0387

Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter...

CVE-2015-0387

Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter...

CVE-2015-0387

CVE-2015-0387 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Server OM Services component (Security - LDAP Security Adapter). The issue enables remote authenticated users to affect confidentiality via LDAP-related vectors. No exploitation details or mitigation are provi...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark7)

The remote Solaris system is missing necessary patches to address security updates : - The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service application crash via a crafted packe...

拓尔思某系统越权操作大集合及GETSHELL

简要描述： 老版本 和 二次开发的貌似部分不受影响... 安全无止境！ 详细说明： / 说明： Copyright ©2004 - 2006 TRS 不受影响 Copyright ©2004 - 2008 TRS 不受影响 以及部分二次开发的不受影响 -------------------------------------- 越权可查看用户信息，几个案例用户加加都有上百万了 / 程序名称：TRS身份服务器单点登录系统 漏洞类型：越权操作 & 任意文件上传GETSHELL 漏洞文件： 越权操作的（多少个点我也没数，反正就那么多）：...