CVE-2023-40464

Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server...

org.apache.inlong:manager-client (>=1.4.0, <=1.7.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.7.0) +2 more potentially affected by CVE-2023-46227 via org.apache.inlong:manager-common (>=1.4.0, <=1.7.0)

org.apache.inlong:manager-common MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.7.0 Source cves: CVE-2023-46227 Source advisory: OSV:GHSA-JJ32-3PF5-5MV5...

SUSE: Security Advisory (SUSE-SU-2023:3867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15: golang-github-QubitProducts-exporter_exporter / etc (SUSE-SU-2023:3868-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3868-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix...

SUSE-SU-2023:3875-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

SUSE-SU-2023:3868-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3122-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3122-1 advisory. python-tornado: - Security fixes: CVE-2023-28370: Fixed an open redirect issue in the static file handler bsc1211741 kiwi-desc-saltboot: -...

SUSE: Security Advisory (SUSE-SU-2023:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2917-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Update to version 9.5.5: CVE-2023-3128: Fix authentication bypass using Azure AD OAuth bsc1212641, jscPED-3694 Bug fixes: Auth: Show invite button if disable login form is set to false. Azure: Fix Kusto auto-completion for Azure datasources. RBAC...

SUSE-SU-2023:2915-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Update to version 9.5.5: CVE-2023-3128: Fix authentication bypass using Azure AD OAuth bsc1212641, jscPED-3694 Bug fixes: Auth: Show invite button if disable login form is set to false. Azure: Fix Kusto auto-completion for Azure datasources. RBAC...

SUSE: Security Advisory (SUSE-SU-2023:2794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.apache.inlong:manager-client (>=1.4.0, <=1.6.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.6.0) +2 more potentially affected by CVE-2023-31058 via org.apache.inlong:manager-common (>=1.4.0, <=1.6.0)

org.apache.inlong:manager-common MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.6.0 Source cves: CVE-2023-31058 Source advisory: GHSA-C3RH-F2W5-FGHM...

org.apache.inlong:manager-client (>=1.4.0, <=1.6.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.6.0) +1 more potentially affected by CVE-2023-31206 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.6.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.6.0 Source cves: CVE-2023-31206 Source advisory: GHSA-F475-JGG3-3JWC...

org.apache.inlong:manager-client (>=1.4.0, <=1.6.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.6.0) +1 more potentially affected by CVE-2023-31065 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.6.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.6.0 Source cves: CVE-2023-31065 Source advisory: OSV:GHSA-757P-7HP5-PQMR...

org.apache.inlong:manager-client (>=1.3.0, <=1.6.0), org.apache.inlong:manager-client-examples (>=1.3.0, <=1.6.0) +1 more potentially affected by CVE-2023-31098 via org.apache.inlong:manager-pojo (>=1.3.0, <=1.6.0)

org.apache.inlong:manager-pojo MAVEN version =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.6.0 Source cves: CVE-2023-31098 Source advisory: GHSA-W3WR-GMWF-R333...

org.apache.inlong:manager-client (>=1.4.0, <=1.5.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.5.0) +1 more potentially affected by CVE-2023-30465 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.5.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.5.0 Source cves: CVE-2023-30465 Source advisory: OSV:GHSA-CQR6-3X3F-9WR3...

org.apache.inlong:manager-client (>=1.4.0, <=1.5.0), org.apache.inlong:manager-client-examples (>=1.4.0, <=1.5.0) +1 more potentially affected by CVE-2023-30465 via org.apache.inlong:manager-pojo (>=1.4.0, <=1.5.0)

org.apache.inlong:manager-pojo MAVEN version =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.5.0 Source cves: CVE-2023-30465 Source advisory: GHSA-CQR6-3X3F-9WR3...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:2575-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2575-1 advisory. grafana: - Version update from 8.5.22 to 9.5.1 jscPED-3694: Security fixes: - CVE-2023-1410:...

SUSE: Security Advisory (SUSE-SU-2023:2578-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Version update from 8.5.22 to 9.5.1 jscPED-3694: Security fixes: - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip bsc1209645 - CVE-2023-1387: grafana: JWT URL-login flow leaks token to data sources through request...