1334 matches found
Microsoft Security Advisory 4033453: Vulnerability in Azure AD Connect Could Allow Elevation of Privilege
The version of Azure Active Directory AD Connect installed on the remote Windows host is prior to 1.1.553.0, and the password writeback setting is enabled. It is, therefore, affected by an elevation of privilege vulnerability due to improper permissions being granted when enabling the password...
CVE-2017-8613: Weak Password Recovery Mechanism for Forgotten Password
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."...
Major Hole Plugged in Secure File Transfer Tool
Biscom, a secure document delivery provider, recently patched a serious vulnerability in its secure file transfer product that could have allowed an authenticated hacker access to data shared between other users. Privately alerted in April by Rapid7 a Biscom customer, the company released an...
A Look at --- SharePoint's Follow Feature XSS(CVE-2017-8514 )
A Look at CVE-2017-8514 --- SharePoint's Follow Feature XSS TL;DR: All your SharePoint installations are belong to us. The XSS worth $2500 affecting both on-premises and online version looks like ... http|https://?FollowSite=0&SiteName='-confirmdocument.domain-' SharePoint needs no more marketing...
Get a Single View of WAF Events with the Imperva AppSecurity View App for Splunk Enterprise
Enterprises are adopting a hybrid infrastructure model to take advantage of rapid deployment of cloud-based services and higher computing power. A compilation of analyst predictions by SecureWorks, shows that the cloud continues to gain momentum as organizations embrace and benefit from new ways ...
Update Rollup 16 for Azure Site Recovery
Describes the fixes that are included in Update Rollup 16 for Azure Site Recovery.IntroductionThis article describes the fixes that are included in Update Rollup 16 for Azure Site Recovery for the following:Microsoft Azure Site Recovery Provider version 5.1.2150.0Microsoft Azure Site Recovery...
Red Hat OpenShift Command Injection Vulnerability
OpenShift is an on-premise or private cloud deployment designed by Red Hat's Service Solutions. A command injection vulnerability exists in Red Hat OpenShift that can be exploited by an attacker to gain privileges and execute arbitrary code...
Cisco IOS Software UBR Devices IPv6 to IPv4 Subsystem Denial of Service Vulnerability
A vulnerability in the IPv6 to IPv4 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a standby Performance Routing Engine PRE to leak a small portion of memory on a targeted system, resulting in a denial of service DoS condition. The vulnerability is due to...
Cisco IOS Software UBR Devices IPv6 to IPv4 Subsystem Denial of Service Vulnerability
A vulnerability in the IPv6 to IPv4 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a Performance Routing Engine PRE crash on a targeted system, resulting in a denial of service DoS condition. The vulnerability is due to a race condition that may cause a...
Security Advisory: CBOS - Improving Resilience to DoS Attacks
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS - Improving Resilience to Denial-of-Service Attacks ========================================================================= Revision 1.0 For Public Release 2002 May 23 16:00 UTC+0000 -...
Can't finish the E-discovery process for an on-premises mailbox (KB5019807)
None None...
Microsoft Dynamics CRM 2013 Update Rollup 2
None None...