8717 matches found
EAP: Sensitive data can be exposed at the server level in domain mode
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information...
EAP: Sensitive data can be exposed at the server level in domain mode
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information...
EAP: Sensitive data can be exposed at the server level in domain mode
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information...
EAP: Sensitive data can be exposed at the server level in domain mode
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information...
EAP: Sensitive data can be exposed at the server level in domain mode
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information...
CVE-2017-2600
In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...
CVE-2016-6065
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root...
CVE-2016-6065
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root...
Command injection
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root...
CVE-2016-6065
CVE-2016-6065 affects IBM Security Guardium Database Activity Monitor appliances. A local user could inject commands that are executed as root due to an injection flaw in the appliance. Affected products/versions identified by IBM include Guardium Database Activity Monitor v8.2, v9, v9.1, v9.5, a...
CVE-2016-6065
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root...
CVE-2016-6065: Improper Neutralization of Special Elements used in an OS Command
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root...
PT-2017-8877
Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor appliance affected versions not specified Description A local user could inject commands that would be executed as root, potentially allowing for elevated privileges and unauthorized system...
CVE-2016-5590
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...
Code injection
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...
CVE-2016-5590
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...
CVE-2016-5590
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...
CVE-2016-5590
CVE-2016-5590 is a vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent Monitoring: Agent). Affected are 3.1.3.7856 and earlier. It enables a high-privileged attacker with network access via TLS to compromise the MySQL Enterprise Monitor, with potential takeover o...
PT-2017-8738
Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor version 3.1.3.7856 and earlier Description A vulnerability in the MySQL Enterprise Monitor component allows a high privileged attacker with network access via TLS to compromise the system. Successful attacks can result...
CVE-2016-5590: Undefined Security Weakness
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...