CVE-2022-47529

CVE-2022-47529 RSA NetWitness Platform EDR Agent / Control de acceso incorrecto - Ejecución de código Durante una auditoría de seguridad del agente EDR descubrí un vector novedoso para manipular el servicio con solo derechos de usuario estándar al apuntar a un objeto de evento de memoria Win32...

EUVD-2018-3105

Malware in sbrugna...

EUVD-2013-6009

Malware in sbrugna...

EUVD-2014-0674

Malware in sbrugna...

EUVD-2012-4534

Malware in sbrugna...

EUVD-2012-4533

Malware in sbrugna...

CVE-2024-28058

In RSA NetWitness NW Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data...

CVE-2024-23169

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...

CVE-2022-47529

Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protectio...

CVE-2012-4608

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4609

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2024-28058

In RSA NetWitness NW Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data...

CVE-2024-28058

In RSA NetWitness NW Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data...

CVE-2024-28058

In RSA NetWitness NW Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data...

CVE-2024-28058

The RSA NetWitness (NW) Platform is vulnerable in versions prior to 12.5.1 due to a flaw where an internal threat actor can impersonate a user whose access has been revoked while they still have an active session. This bypass allows the attacker to gain unauthorized access to sensitive data and p...

CVE-2024-28058: Incorrect Default Permissions

In RSA NetWitness NW Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data...

RSA Security NetWitness Platform 安全漏洞

RSA Security NetWitness Platform is a comprehensive platform from RSA Security USA that accelerates threat detection and response. It collects and analyzes data from all capture points logs, packets, netflow, endpoints, and IoT and compute platforms physical, virtual, and cloud, enriching data wi...

CVE-2024-23169

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...

CVE-2024-23169

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...

CVE-2024-23169: Improper Neutralization of Input During Web Page Generation

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...