Zammad licensing issue vulnerability

Zammad is a suite of ticket management software from Zammad, a German company. Zammad is vulnerable to authorization issues in versions prior to 5.0.1, which stem from a lack of authentication measures or insufficient authentication strength in the network system or product. An attacker could use...

IBM Sterling B2B Integrator Licensing Issue Vulnerability (CNVD-2021-87017)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition versions 5.2.0...

Bosch Rexroth IndraMotion Mlc Licensing Issue Vulnerability

Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robotics control.A security vulnerability exists in Bosch Rexroth IndraMotion Mlc, which stems from a network system or product that does not properly use the relevant cryptographic algorithms, and...

Ni-Pal 输入验证错误漏洞

Ni-Pal is a software component from Ni USA Inc. It is used to provide required functionality for multiple NI drivers. A security vulnerability exists in the NI-PAL driver that stems from a lack of effective privilege licensing and access control measures on a networked system or product...

Fortinet FortiManager Licensing Issue Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and...

Citrix Provisioning Services - Target Device(s) Hang After 96 Hours With No PVS License

After a license server upgrade to support PVS 1912 LTSR from 7.15 LTSR Target Devices may immediately report entering "grace period". After 96 hours of uptime the Target Device may appear to freeze. Target Device hangs or freezes are typically first found in the Studio console by a CVAD...

Vulnerability fixed in Autodesk Licensing Service

A vulnerability has been fixed in the Autodesk Licensing Service. This service is present on all of Autodesk's flagship products. The vulnerability allows a malicious person with local access to obtain elevated privileges. Autodesk has released updates to fix the vulnerability. More information c...

maine.gov Improper Access Control vulnerability OBB-2112263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| maine.gov ---|--- Open Bug Bounty...

Microsoft Azure 权限许可和访问控制问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation. A vulnerability exists in Microsoft Azure with privilege licensing and access control issues. The following products and versions are affected: Azure CycleCloud version 7.9.10...

Totolink A720R License Issue Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The Totolink A720R suffers from an authorization issue vulnerability in version V4.1.5cu.470B20200911, which stems from an improper implementation of the form login feature in the software version, and can be...

Security Bulletin: Multiple Vulnerabilities in IBM® WebSphere Application Server Liberty affect IBM LKS Administration and Reporting Tool and its Agent

Summary There are multiple vulnerabilities in the IBM® WebSphere Application Server Liberty used by IBM LKS Administration and Reporting Tool and its Agent. A fix has been identified and is being published here. Vulnerability Details CVEID: CVE-2021-26296 DESCRIPTION: Apache MyFaces is vulnerable...

Rancher Labs Rancher Licensing Issue Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

IBM Security Access Manager Privilege Permission and Access Control Issues Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

Citrix Hypervisor Open Source Licensing and Attribution

The Citrix Hypervisor product is a compilation of software packages. Each package is governed by its own license. The complete licensing terms applicable to a given package can be found in the source RPM of the package, unless the package is covered by a proprietary license which does not permit...

How to navigate open source licensing risks

Vulnerabilities aren't the only risk that comes with open source software use. Learn how you can best mitigate licensing risks to ensure your team is meeting all legal requirements while building with open source code...

XWiki Platform licensing issue vulnerability

Xwiki Platform is a Wiki platform for creating Web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to authorization issues, which can be exploited by attackers to reset authentication failure records...

Information about Kasten K10 licensing and Kasten K10 support

Objective This article documents how to retrieve a purchased Kasten K10 license code. Solution How to retrieve a copy of the initial Kasten K10 license code After you purchase a Kasten K10 license code, it is sent to your email. If that license code has been lost or another copy is needed, you mu...

Receita Federal IRPF Licensing Issue Vulnerability

Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...

Autodesk Licensing Services Access Control Error Vulnerability

Autodesk Licensing Services is a licensing service of the American company Autodesk. An Access Control Error vulnerability exists in Autodesk Licensing Services, which originates from a malicious user with restricted privileges can run any number of tools on the system to identify services...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...