11740 matches found
Ubuntu: Security Advisory (USN-2034-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.10 / 13.04 / 13.10 : keystone vulnerability (USN-2034-1)
Brant Knudson discovered a logic error in the LDAP backend in Keystone where removing a role on a tenant for a user who does not have that role would instead add the role to the user. An authenticated user could use this to gain privileges. Ubuntu is not configured to use the LDAP Keystone backen...
Ubuntu Update for keystone USN-2034-1
Check for the Version of keystone OpenVAS Vulnerability Test $Id: gbubuntuUSN20341.nasl 8509 2018-01-24 06:57:46Z teissa $ Ubuntu Update for keystone USN-2034-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
USN-2034-1: OpenStack Keystone vulnerability
Brant Knudson discovered a logic error in the LDAP backend in Keystone where removing a role on a tenant for a user who does not have that role would instead add the role to the user. An authenticated user could use this to gain privileges. Ubuntu is not configured to use the LDAP Keystone backen...
RHEL 6 : 389-ds-base (RHSA-2013:1752)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1752 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...
RedHat Update for 389-ds-base RHSA-2013:1752-01
Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2013:1752-01 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
RedHat Update for 389-ds-base RHSA-2013:1752-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Servern
IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Servern. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94223 Stand: 13...
IT-Grundschutz M4.310: Einrichtung des LDAP-Zugriffs auf Verzeichnisdienste - Windows
IT-Grundschutz M4.310: Einrichtung des LDAP-Zugriffs auf Verzeichnisdienste Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94231 Stand: 13. Ergänzungslieferun...
IT-Grundschutz M4.310: Einrichtung des LDAP-Zugriffs auf Verzeichnisdienste (Windows)
IT-Grundschutz M4.310: Einrichtung des LDAP-Zugriffs auf Verzeichnisdienste Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94231 Stand: 13. Ergänzungslieferun...
IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Servern
IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Servern. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94223 Stand: 13...
DeepOfix 3.3 SMTP Authentication Bypass Vulnerability
DeepOfix versions 3.3 and below suffer from an SMTP server authentication bypass vulnerability due to an LDAP issue. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server...
DeepOfix SMTP Authentication Bypass
DeepOfix versions 3.3 and below suffer from an SMTP server authentication bypass vulnerability due to an LDAP issue. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
DeepOfix SMTP Server 3.3 - Authentication Bypass
DeepOfix SMTP Server 3.3 - Authentication Bypass ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server...
DeepOfix 3.3 SMTP Authentication Bypass
====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server ====================================================================================== Platform: DeepOfix Version: = 3.3 All...
LDAP and Active Directory credentials are stored in plain text in database
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-31605. panel This information should be encrypted so that anyone with access to the database does not gain access to other syste...
LDAP credentials are stored in plain text in database
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-31605. panel This information should be encrypted so that anyone with access to the database does not gain access to other...
LDAP credentials are stored in plain text in database
This information should be encrypted so that anyone with access to the database does not gain access to other systems...
LDAP and Active Directory credentials are stored in plain text in database
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-31605. panel This information should be encrypted so that anyone with access to the database does not gain access to other syste...