PT-2019-6169 · Intel +5 · Edk Ii +5

Name of the Vulnerable Software and Affected Versions: EDKII affected versions not specified Description: The issue is related to insufficient input validation in the MdeModulePkg component of EDKII, which may allow an unauthenticated user with physical access to potentially enable escalation of...

CVE-2018-1593

CVE-2018-1593 affects IBM Multi-Cloud Data Encryption (MDE) 2.1. The vulnerability stems from missing file checksums, enabling an unauthorized user to manipulate data. Affected versions are MDE 2.1–2.1.0.1. IBM’s bulletin lists remediation: upgrade to MDE 2.1.0.2 (Multiplatform English via Passpo...

Security Bulletin: Multi-Cloud Data Encryption (MDE) is affected by an Information Exposure vulnerability

Summary Multi-Cloud Data Encryption MDE has addressed the following information exposure vulnerability. Vulnerability Details CVEID: CVE-2018-1592 DESCRIPTION: PEN-TEST: Query Parameter in SSL Request CVSS Base Score: 6.5 CVSS Temporal Score: See Not Applicable for the current score CVSS...

Security Bulletin: Multi-Cloud Data Encryption (MDE) is affected by an SSL Query Parameter Exposure vulnerability

Summary Multi-Cloud Data Encryption MDE has addressed the following query parameter exposure vulnerability. Vulnerability Details CVEID: CVE-2018-1592 DESCRIPTION: IBM Multi-Cloud Data Encryption MDE stores sensitive information in URL parameters. This may lead to information disclosure if...

Security Bulletin: Multi-Cloud Data Encryption (MDE) is affected by an Insufficient Session Expiration vulnerability.

Summary Multi-Cloud Data Encryption MDE has addressed the following Insufficient Session Expiration vulnerability. Vulnerability Details CVEID: CVE-2018-1590 DESCRIPTION: IBM Multi-Cloud Data Encryption MDE does not invalidate session tokens in a timely manner. The lack of proper session expirati...