CVE-2017-12315

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative use...

Another Shady App Found Pre-Installed on OnePlus Phones that Collects System Logs

The OnePlus Saga Continues… Just a day after the revelation of the hidden Android rooting backdoor pre-installed on most OnePlus smartphones, a security researcher just found another secret app that records tons of information about your phone. Dubbed OnePlusLogKit, the second pre-installed has...

Failed to import Veeam Cloud Connect certificate after Veeam Availability Console server migration

Challenge After migrating your Veeam Availability Console VAC installation to a new server and adding an existing Veeam Cloud Connect VCC server, the following certificate error may be observed: Failed to import certificate from the Veeam Cloud Connect server. See debug logs for more information...

CVE-2017-15113

ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to...

OPENSUSE-SU-2017:2976-1 Security update for ansible

This update for ansible to version 2.4.1.0 fixes the following vulnerabilities: - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment bsc1038785 - CVE-2016-9587: host to controller command execution vulnerability bsc1019021 - CVE-2016-8628: Command injection by...

How to collect logs for cases involving Oracle

Challenge An issue with backing up of the Oracle database server and/or removal of Oracle archived logs is suspected. Veeam Technical Support would like to gather information from your servers and databases to investigate this issue. Additional logs must be gathered manually from the guest OS on...

Catalyst Mahara Mobile Information Disclosure Vulnerability

Catalyst Mahara Mobile is a suite of mobile social networking software from Catalyst IT in New Zealand. A security vulnerability exists in versions of Catalyst Mahara Mobile prior to 1.2.1, which stems from the program sending passwords in clear text to the access log. An attacker could exploit t...

Information disclosure

Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log...

CVE-2017-1000151

Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log...

The vulnerability of the library authentication function in WEBrick allows a hacker to execute arbitrary commands.

The vulnerability of the WEBrick library’s authentication function in the Ruby distribution is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to inject control sequences and execute arbitrary commands in the user’s...

PT-2017-17794

Name of the Vulnerable Software and Affected Versions Ansible versions 2.3.x through 2.3.2 Ansible versions 2.4.x through 2.4.0 Description A flaw was found in the way Ansible passed certain parameters to the jenkins plugin module, allowing remote attackers to expose sensitive information from a...

CVE-2016-10699

D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...

Redmine Information Disclosure Vulnerability (CNVD-2017-31956)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . An information disclosure vulnerability exists in Redmine versions prior to 3.2.6 and 3.3.x prior to...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32854)

IBM BigFix Platform is a dynamic integrated messaging content-driven and management system multi-technology platform from IBM, USA.BigFix Server compoment is one of the BigFix server components. An information disclosure vulnerability exists in the BigFix Server component of the IBM BigFix Platfo...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32855)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.2 and 9.5, which can be exploited by remote attackers to access URLs via server logs, referrer headers, or browser history...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

Information disclosure

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

Information disclosure

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1226

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905...