290 matches found
Microsoft Network Policy Server 安全漏洞
Microsoft Network Policy Server is used to create and enforce organization-wide network access policies for connection request authentication and authorization by Microsoft Corporation USA. A security vulnerability exists in Microsoft Network Policy Server NPS. The following products and versions...
PT-2022-5499 · Microsoft · Network Policy Server +1
Name of the Vulnerable Software and Affected Versions: Network Policy Server NPS affected versions not specified Description: The issue is related to insufficient input validation in the Network Policy Server NPS of Microsoft Windows operating systems. It allows a remote attacker to cause a denia...
PT-2022-5451 · Microsoft · Windows Network Policy Server +1
Name of the Vulnerable Software and Affected Versions: Windows Network Policy Server NPS affected versions not specified Description: The issue is related to insufficient protection of service data in the Network Policy Server NPS of Windows operating systems. This can allow a remote attacker to...
KLA20047 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...
CVE-2021-3586
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...
KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2
KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serv...
KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012
KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...
May 19, 2022—KB5015019 (OS Build 14393.5127) Out-of-band
None None...
May 19, 2022—KB5015018 (OS Build 17763.2931) Out-of-band
None None...
KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2
KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serve...
May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED
None None...
May 10, 2022—KB5013963 (OS Build 10240.19297) - EXPIRED
None None...
Is Your Kubernetes Cluster Ready for Version 1.24?
Kubernetes rolled out Version 1.24 on May 3, 2022, as its first release of 2022. This version is packed with some notable improvements, as well as new and deprecated features. In this post, we will cover some of the more significant items on the list. The Dockershim removal The new release has...
CVE-2022-0567
A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in...
CVE-2022-0567
CVE-2022-0567 describes a vulnerability in ovn-kubernetes where an egress network policy can bypass existing ingress policies, enabling access to pods that should be unreachable and leading to information disclosure. The primary impact is network-level exposure within a Kubernetes cluster; CVSS v...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.8.36 security update
Red Hat OpenShift Container Platform release 4.8.36 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.47 bug fix and security update
Red Hat OpenShift Container Platform release 4.7.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...
CVE-2021-0653
In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-0653
In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
