The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the lack of access control over files. This allows a hacker to modify the file system of the container.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to modify the file system of the container remotely...

CVE-2023-35018

IBM Security Verify Governance (Identity Manager virtual appliance) is affected by CVE-2023-35018, where a privileged user could upload arbitrary files due to improper file validation. The issue affects version pre-10.0.2 FP0 in the Identity Manager virtual appliance component. IBM’s bulletin als...