ceph: ceph-mon does not perform authorization on OSD pool ops

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete and corrupt snapshot images...

ceph: ceph-mon does not perform authorization on OSD pool ops

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete and corrupt snapshot images...

How to Move Veeam Backup for Microsoft 365 to a New Server

Purpose This article documents the procedure for moving resources assigned to a Veeam Backup for Microsoft 365 server installation to a new Veeam Backup for Microsoft 365 server. At this time, there is no way to export the configuration of Veeam Backup for Microsoft 365. As such,all organizations...

Information disclosure

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590

CVE-2016-9590 affects puppet-swift (used by Red Hat OpenStack Platform director to install Object Storage). Root cause: during installation the Puppet script deploys the service and incorrectly removes and then recreates proxy-server.conf with world-readable permissions, enabling information disc...

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

CVE-2016-9590: Exposure of Sensitive Information to an Unauthorized Actor

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

PT-2018-5103

Name of the Vulnerable Software and Affected Versions puppet-swift versions prior to 8.2.1 puppet-swift versions prior to 9.4.4 Description The issue concerns an information-disclosure problem in Red Hat OpenStack Platform director's installation of Object Storage swift. It occurs because the...

[SECURITY] Fedora 27 Update: ceph-12.2.4-1.fc27

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage...

Star Queen Aliyun OSS credentials have information leakage vulnerability

Star Queen APP is a social platform based on beauty and beautification manicure plastic surgery and bodybuilding and other industries. AliCloud Object Storage Service OSS is a massive, secure and highly reliable cloud storage service provided by AliCloud. After the star AliCloud OSS credentials...

Xinhua News Agency Ali Cloud OSS credentials have information leakage vulnerability

Xinhua News Agency Client is the mobile portal and new media flagship of the national news agency, the leader of China's new media national team, the unified entrance of China's party and government client clusters and the comprehensive information service platform. Aliyun Object Storage Service...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...

Cloud tip high school entrance examination Ali cloud OSS credentials have information leakage vulnerability

Cloudtip Higher Education App is a study software for high school students. There is an information leakage vulnerability in the Aliyun OSS credentials of CloudTip Higher Education. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret,...

Xiaoming probe test Ali cloud OSS credentials have information leakage vulnerability

Xiaoming tan exam app is a learning mobile app application. Xiaoming Tangkao Ali Cloud OSS credentials have an information leakage vulnerability. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the mobile app. An...

Lychee Live AliCloud OSS credentials have information leakage vulnerability

Lychee Live app is an Internet-based interactive live broadcasting platform launched by Guangdong Network Radio and Television. There is an information leakage vulnerability in Lychee Live Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

Today's manipulation of the AliCloud OSS credentials have information leakage vulnerability

Today's manipulation is a practical financial management cell phone application, the user through the software can conveniently keep abreast of the precious metals trading market, information, easy financial management, efficient money. AliCloud Object Storage Service Object Storage Service,...