Oracle Linux 8 : bind (ELSA-2019-3552)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3552 advisory. - Fix CVE-2018-5745 - Fix CVE-2019-6465 - Fix CVE-2019-6471 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

RLSA-2023:4059 Important: .NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet6.0 SDK 6.0.120, Runtime 6.0.20. BZ2219639 Security Fixes: dotnet: race...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 6.0 bugfix update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

Authentication flaw

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

CVE-2023-34392 Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

CVE-2023-34392: Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

"This Apple ID can't be used to make purchases" error when installing Secure Hub on DEP devices

When attempting to download and install the Citrix Secure Hub app on devices enrolled through the Device Enrollment Program DEP using a Managed Apple ID in Apple Business Manager ABM, users may encounter the error message: "This Apple ID can't be used to make purchases."...

org.jenkinsci.plugins:managed-scripts (>=0.0.1, <=0.2.0) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (1.2)

org.jenkins-ci.plugins:config-file-provider MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.0.1, =0.2.0 Source cves:...

org.jenkinsci.plugins:managed-scripts (>=0.3, <=1.2.1) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.3, =1.2.1 Source cves:...

org.jenkinsci.plugins:managed-scripts (1.2.5-beta) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.14-beta)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.14-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.2.5-beta Source cves:...

org.jenkins-ci.plugins:ivy (>=1.27, <=2.2), org.jenkinsci.plugins:managed-scripts (1.3) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.15)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:ivy =1.27, =2.2 -...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.11, <=2.13), org.jenkinsci.plugins:managed-scripts (1.2.4) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.13)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.11, =2.13 -...

org.jenkinsci.plugins:managed-scripts (1.4) potentially affected by CVE-2023-40339 via org.jenkins-ci.plugins:config-file-provider (2.16.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.4 Source cves: CVE-2023-40339...

CISA Releases JCDC Remote Monitoring and Management (RMM) Cyber Defense Plan

Today, CISA released the Remote Monitoring and Management RMM Cyber Defense Plan, the first proactive Plan developed by industry and government partners through the Joint Cyber Defense Collaborative JCDC. This plan addresses systemic risks facing the exploitation of RMM software. Cyber threat...

Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers...

CVE-2023-4337

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation...

CVE-2023-4337

CVE-2023-4337 affects the Broadcom RAID Controller web interface. The vulnerability arises from improper session handling of gateway-installed managed servers. Based on NVD metrics, it is a CRITICAL issue (CVSS v3.1: 9.8) with network access, no user interaction required, and high impact to confi...

CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation...

CVE-2023-21229

In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...