Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Netezza Platform Software (CVE-2015-2808)

Summary The RC4 Bar Mitzvah Attack for SSL/TLS affects IBM Netezza Platform Software. Vulnerability Details CVEID:CVE-2015-2808 DESCRIPTION:The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit thi...

Building the Azure IoT Edge Security Daemon in Rust

Azure IoT Edge is an open source, cross platform software project from the Azure IoT team at Microsoft that seeks to solve the problem of managing distribution of compute to the edge of your on-premise network from the cloud. This post explains some of the rationale behind our choice of Rust as t...

Arbitrary Code Execution Vulnerability in SGO South Satellite Navigation Platform Software

Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd. is subordinate to Nanfang Surveying and Mapping Group, and is the first national high-tech enterprise in China that has passed through the high-precision GNSS technology industry chain and realized large-scale and market-oriented...

Security Bulletin: Security Vulnerabilities in Network Time Protocol Daemon affect Intel Manycore Platform Software Stack for use on Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A, and Intel Xeon Phi 7120P PCI-Express add-in cards

Summary Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform Software Stack for use on the Intel Xeon Phi PCI-Express add-in cards. Vulnerability Details Abstract Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform...

Intel SGX SDK and SGX Platform Software Elevation of Privilege Vulnerability

Intel SGX SDK and SGX Platform Software are both products of Intel Corporation, Intel SGX SDK is a software development kit based on SGX Intel Software Security Extensions technology, and SGX Platform Software is a software protection extension platform. A security vulnerability exists in Intel S...

CVE-2018-18098

Improper file verification in install routine for IntelR SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access...

PT-2019-9554

Name of the Vulnerable Software and Affected Versions IntelR SGX SDK and Platform Software for Windows versions prior to 2.2.100 Description The issue is related to improper file verification in the install routine, which may allow an escalation of privilege via local access. Recommendations For...

CVE-2018-18098: Incorrect Permission Assignment for Critical Resource

Improper file verification in install routine for IntelR SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access...

Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US

No description provided...

Authorization

A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit...

PT-2018-13029

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex HX Data Platform Software affected versions not specified Description A lack of proper input and authorization of HTTP requests in the web-based UI could allow an unauthenticated, remote attacker to access sensitive information...

CVE-2018-15429: Improper Input Validation

A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit...

Intel Software Guard Extensions (SGX) Vulnerabilities - US

Lenovo Security Advisory: LEN-21284 Potential Impact: Elevation of privilege, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5736, CVE-2018-3626, CVE-2018-3639, CVE-2018-3640, CVE-2018-3691 Summary Description: Intel has issued several advisories...

IBM Netezza Platform Software Local Elevation of Privilege Vulnerability

IBM Netezza Platform Software is an integrated data system from IBM that is based on InfoSphere Smart Analytics technology and responds to real-time decision making, fraud detection and other needs. A security vulnerability exists in IBM Netezza Platform Software versions 7.0.4 through 7.2.1.6. A...

CVE-2018-1460

IBM Netezza Platform Software IBM PureData System for Analytics 1.0.0 could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211...

CVE-2018-1460: Improper Privilege Management

IBM Netezza Platform Software IBM PureData System for Analytics 1.0.0 could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211...

PT-2018-12606

Name of the Vulnerable Software and Affected Versions IBM Netezza Platform Software version 1.0.0 Description The issue allows a local user to modify a world-writable file, potentially enabling the execution of commands as root. Recommendations For IBM Netezza Platform Software version 1.0.0,...

CVE-2018-3689: Undefined Security Weakness

AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

CVE-2017-5736: Improper Privilege Management

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...