CVE-2023-22833 Mandatory control bypass in Lime2

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances...

Upgraded Q -> 2 from #154 [1676532286167]

Judge has assessed an item in Issue 154 as 2 risk. The relevant finding follows: Quest.claim can risk gas exhaustion on large receipt claims due to multiple mandatory loops function claim public virtual onlyQuestActive if isPaused revert QuestPaused; uint256 memory tokens =...

Intel® Media SDK Advisory

Summary: Potential security vulnerabilities in the Intel® Media Software Development Kit SDK may allow denial of service or enable escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34841 Description:...

Citrix License Telemetry FAQ

General License Telemetry Questions What was announced? In mid-November 2024, Cloud Software Group made changes regarding license telemetry for on-premises customer-managed environments which use the Citrix License Server: Starting with License Server 11.17.2 Build 40000, the on-premises...

CVE-2023-22397

An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine PFE on Juniper Networks Junos OS Evolved PTX10003 Series devices allows an adjacently located attacker who has established certain preconditions and knowledge of the environme...

Capsule Console 安全漏洞

Capsule Console is a web interface for Capsule8 from Capsule USA, Inc. for event management, sensor configuration, and system analysis. A security vulnerability exists in versions of Capsule prior to 0.1.3, which stems from the fact that an attacker can detach namespaces from tenants that are...

Debian: Security Advisory (DSA-5262-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google to Make Account Login Mandatory for New Fitbit Users in 2023

Wearable technology company Fitbit has announced a new clause that requires users to switch to a Google account "sometime" in 2023. "In 2023, we plan to launch Google accounts on Fitbit, which will enable use of Fitbit with a Google account," the Google-owned fitness devices maker said. The switc...

Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2022-192-01)

The version of seamonkey installed on the remote host is prior to 2.53.13. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-192-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

Lockc - Making Containers More Secure With eBPF And Linux Security Modules (LSM)

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...

Citrix Studio Mandatory Upgrade

Citrix Studio shows the messageMandatory Upgrade...

Threat Source newsletter (May 12, 2022) — Mandatory MFA adoption is great, but is it too late?

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. Mandatory multi-factor authentication is all the rage nowadays. GitHub just announced that all contributors would have to enroll in MFA by 2023 to log into their accounts. And Google announced as part of... This is on...

WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin <= 1.1.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin versions = 1.1.7. Solution Update the WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin to the latest available version at least 1.1.8...

Vulnerability fixed in Brocade Fabric OS

A vulnerability has been fixed in Brocade Fabric OS. There is at least one account with hardcoded credentials where the administrator is not forced to change the password by default. adjust. With the new versions of Fabric OS, this is now mandatory. Cisco has released updates to fix the...

FortiAuthenticator - "Mandatory password and OTP" setting not enforcing OTP on unimported remote users

An incorrect implementation of authentication algorithm vulnerability CWE-303 in FortiAuthenticator may allow an user whose LDAP account is unimported to bypass the second factor of authentication via a RADIUS login portal...

Fedora: Security Advisory for libsepol (FEDORA-2021-67efe88c29)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: libsepol-3.3-2.fc35

Security-enhanced Linux is a feature of the Linux=EF=BF=BD=EF=BF=BD kernel an d a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve t...

Secure Encryption Bypass

github.com/wireapp/wire-ios is vulnerable to bypass of secure encryption. Mandatory encryption at rest feature can be pypassed when the device passcode is disabled or is not set. The users will not be aware of inactivation of encryption at rest as the feature is hidden to them...

Oracle Auditing Part 2: Mandatory and Fine-Grained Auditing

This is the second of three articles on the topic of Oracle auditing. It is relevant to Oracle 10g, 11g, and 12c, although Unified Auditing in 12c makes some of this content irrelevant if you choose to use Pure Unified Auditing. Unified Auditing will be covered in the third part of this series an...

SUSE: Security Advisory (SUSE-SU-2016:0256-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...