576 matches found
How to Connect to an Object Storage Repository via Azure Blob Private Endpoints
Purpose This article documents how to configure Veeam Backup & Replication to use Azure Blob Storage Account private endpoints via Azure VPN or Azure ExpressRoute for Scale-Out Backup Repository offload to Capacity Tier or Archive Tier or to connect to an Object Storage Repository in Veeam Backup...
Virtuozzo Hybrid Server 7.5 Update 4 (7.5.4-465)
Virtuozzo Hybrid Server 7.5 Update 4 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.80.1.vz7.191.4. Vulnerability id: PSBM-142718 Node IP was not set when changing 'vnclisten' in '/etc/libvirt/qemu.conf.' Vulnerability id:...
PT-2022-6365 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the cleartext storage of sensitive information in the S3 component, potentially leading to information disclosure. An authenticated local attacker cou...
Veeam Backup for Cloud Solutions Potential Data Loss
Challenge Possible data loss in backups created. Affected product versions: Veeam Backup for AWS 5.0.0.452 Veeam Backup for AWS 5.1.0.39 Veeam Plug-In for Microsoft Azure 4.0.0.679 Veeam Backup for Google Cloud 3.0.0.859 Cause While creating backups to object storage, data loss may occur within t...
Alibaba Cloud Object Storage Service 安全漏洞
Alibaba Cloud Object Storage Service Alibaba Cloud OSS is a secure, cost-effective object storage service from China's Alibaba Cloud. A security vulnerability exists in Alibaba Cloud Object Storage Service versions prior to 0.8.1, which stems from an inadvertent disclosure of incoming secret...
PT-2022-24956 · Alibaba · Aliyun-Oss-Client
Name of the Vulnerable Software and Affected Versions: aliyun-oss-client versions prior to 0.8.1 Description: The aliyun-oss-client unintentionally divulges the authentication secret. Users of this library will be affected, as the incoming secret will be disclosed unintentionally. Recommendations...
[SECURITY] Fedora 37 Update: ceph-17.2.5-1.fc37
Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...
Cloud Mobility for Dell EMC Storage Access Control Error Vulnerability
Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...
Hitachi Vantara Hitachi Content Platform Access Control Error Vulnerability
Hitachi Vantara Hitachi Content Platform is an object storage system from Hitachi Vantara, Inc. that provides massively scalable, reliable, efficient and easy-to-use storage for automated management and preservation of content. An access control error vulnerability exists in Hitachi Vantara Hitac...
Virtuozzo Hybrid Infrastructure 5.2 Update 1 (5.2.1-57)
This update provides full support for Authorization Code Flow, as well as bug fixes and improvements. Vulnerability id: VSTOR-57337 It is impossible to set the disk role to "Unassigned" while joining a node to the cluster. Vulnerability id: VSTOR-57187 Unable to add an iSCSI target with multiple...
The vulnerability of the StorageGRID object storage software, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information or modify the content of notifications.
The vulnerability of the StorageGRID object storage software lies in errors during information processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or modify the content of notifications...
Unauthorized Access Vulnerability in AliCloud Object Storage OSS Improperly Configured by Some Users
AliCloud Object Storage OSS Object Storage Service is a cloud storage service. AliCloud Computing Limited Object Storage OSS some user misconfiguration exists unauthorized access vulnerability, an attacker can use the vulnerability to obtain sensitive information...
CVE-2022-35919
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...
Design/Logic Flaw
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...
CVE-2022-35919
Summary: CVE-2022-35919 affects MinIO by enabling path traversal via the admin:ServerUpdate API when an authenticated admin triggers a specific error, exposing contents readable by the MinIO process. Related sources describe affected versions and a fix path. Impact (as stated): potential exposure...
CVE-2022-35919 Authenticated requests for server update admin API allows path traversal in minio
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...
CVE-2022-35919
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...
[SECURITY] Fedora 36 Update: golang-github-aliyun-ossutil-1.7.9-4.fc36
Alibaba Cloud Aliyun Object Storage Service OSS CLI...
TerraformGoat - "Vulnerable By Design" Multi Cloud Deployment Tool
TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure. Scenarios ID | Cloud Service Company | Types Of Cloud...