3220 matches found
Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41540)
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in the Panorama context switching feature of Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability by accessing the Panorama...
CVE-2020-2013
A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...
CVE-2020-2018
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue...
CVE-2020-2018
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue...
Design/Logic Flaw
A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...
CVE-2020-2009 PAN-OS: Panorama SD WAN arbitrary file creation
An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in...
CVE-2020-2018 PAN-OS: Panorama authentication bypass vulnerability
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue...
PAN-OS: Panorama SD WAN arbitrary file creation
An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in...
PAN-OS: Panorama authentication bypass vulnerability
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue...
CVE-2019-10169
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running...
CVE-2019-10169
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running...
Design/Logic Flaw
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running...
CVE-2019-10169
Keycloak UMA policy abuse (CVE-2019-10169) enables an authenticated attacker with UMA permissions to set a malicious script in the user-managed access policy, triggering execution of code with the permissions of the running application user. The core issue is a script in UMA policy configuration ...
CVE-2019-10169
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running...
PT-2020-9053
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw was found in Keycloak's user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to...
Citrix ShareFile storage zones Controller multiple security updates
Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...
CVE-2019-10169
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running...
How to Migrate Veeam Agent Backup Files to Cloud Connect Repository
Purpose This article documents the available methods to migrate backup data from Standalone deployments of Veeam Agent for Microsoft Windows or Veeam Agent for Linux from a non-Cloud Connect Repository to a Cloud Connect repository, allowing the original backup job to continue utilizing that back...
Acronis: Reflected XSS on http://www.grouplogic.com/files/glidownload/verify.asp
Hello there, I hope you are well! As I see, Group Logic is your subsidary and www.grouplogic.com is a managed website by Acronis. F803772 I found a reflected xss on http://www.grouplogic.com/ PoC:...
New iPhone Zero-Day Discovered
Last year, ZecOps discovered two iPhone zero-day exploits. They will be patched in the next iOS release: Avraham declined to disclose many details about who the targets were, and did not say whether they lost any data as a result of the attacks, but said "we were a bit surprised about who was...