Moderate: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Syntribos: An Open Source API Security Testing Tool

PenTestIT RSS Feed Web application security testing is a multi-faceted and yet important domains today. A few years ago, it was only the front end security tests and then came the backend. As newer endpoints are being exposed, it becomes imperative to test their security too. Syntribos is one suc...

Cannot bind LDAP on XenMobile sever on port 636

Admin is unable to bind Secure LDAP on XMS server...

Moderate: Red Hat Security Advisory: Red Hat Certificate System 8 security, bug fix, and enhancement update

An update is now available for Red Hat Certificate System 8 with Advanced Access. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Cert Based Authentication + LDAP Enrollment failing for Cloud connector- XenMobile Setup

Under PKI entities, the test connectivity is failing for the CA server XenMobile Debug Logs : 2017-02-06T15:30:57.847+0000 | 200B97A4C77E1C34 | ERROR | http-nio-14443-exec-61 | com.sparus.nps.pki.connector.MsCertSrvConnector |TestConnection to pki url certnew.cer failed with response Headers:...

Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - Lenovo Support US

No description provided...

Nextcloud: Nextcloud logs ldap passwords

When the ldap server is temporarily unavailable, data like the attached ends up in log files. I've replaced usernames with XXXUSERnXXX and passwords with XXXPASSnXXX. It seems that at least the following are missing from $methodsWithSensitiveParameters in lib/private/Log.php: - bind -...

Authentication Bypass

casual/igldapssoauth is vulnerable to authentication bypass. A malicious user with the knowledge of a username can login with an empty password through LDAP...

CVE-2015-1401

Improper Authentication vulnerability in the "LDAP / SSO Authentication" igldapssoauth extension 2.0.0 for TYPO3...

Authentication flaw

Improper Authentication vulnerability in the "LDAP / SSO Authentication" igldapssoauth extension 2.0.0 for TYPO3...

CVE-2015-1401

CVE-2015-1401 affects TYPO3’s ig_ldap_sso_auth extension (v2.0.0). The vulnerability is an improper authentication/bypass issue due to insufficient authentication against LDAP/AD. Impact is evaluated as high to critical (CVSSv2 base 7.5; CVSSv3 base 9.8). Remedy: upgrade to 2.0.1 (or later) per T...

CVE-2015-1401

Improper Authentication vulnerability in the "LDAP / SSO Authentication" igldapssoauth extension 2.0.0 for TYPO3...

CentOS 7 : openldap (CESA-2017:1852)

An update for openldap is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CentOS 7 : curl (CESA-2017:2016)

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

openldap security update

CentOS Errata and Security Advisory CESA-2017:1852 An update for openldap is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 6 / 7 : java-1.7.0-openjdk (CESA-2017:2424)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2017-869)

It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application. CVE-2017-10102 Multiple flaws were discovere...

Critical: java-1.7.0-openjdk

Issue Overview: It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application. CVE-2017-10102 Multiple flaw...

Cisco Adaptive Security Appliance Username Enumeration Information Disclosure Vulnerability (CSCvd47888)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA that could allow an authenticated, remote attacke...

OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)

It was discovered that the LDAPCertStore class in the Security component of OpenJDK followed LDAP referrals to arbitrary URLs. A specially crafted LDAP referral URL could cause LDAPCertStore to communicate with non-LDAP servers...