IBM Spectrum Protect Code Execution Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a set of data protection platforms from IBM in the United States. A code execution vulnerability exists in IBM Spectrum Protect versions 8.1.0.0 through 8.1.9.200 and 7.1.0.0 through 7.1.10.0. The vulnerability originates from a...

IBM Spectrum Protect Plus Administrative Console Detection

Binary data ibmsppadminconsoledetect.nbin...

IBM Spectrum Protect Plus username Command Injection

The IBM Spectrum Protect Plus administrative console running on the remote host is affected by a remote command injection vulnerability due to improper validation of user-supplied data when processing a login HTTP request. An unauthenticated, remote attacker can exploit this, via a specially...

IBM Spectrum Protect Plus Web UI Detection

Binary data ibmsppwebuidetect.nbin...

Description of the Microsoft Office for Mac 2011 14.1 Update

This article describes the Service Pack 1 14.1 updates for Office for Mac 2011.IntroductionMicrosoft has released security bulletins MS11-021 and MS11-022. These security bulletins contain all the relevant information about the security updates for Microsoft Office for Mac 2011 for Mac. To view t...

CVE-2020-1989

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...

CVE-2020-1987

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

Privilege escalation

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...

Design/Logic Flaw

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

Information disclosure

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

CVE-2020-1989

CVE-2020-1989 affects Palo Alto Networks GlobalProtect Agent for Linux on ARM, due to an incorrect privilege-assignment flaw when writing application-specific files. This enables a local authenticated user to gain root privileges. Affected: GlobalProtect Agent for Linux 5.0 before 5.0.8; 5.1 befo...

CVE-2020-1988

The issue is an unquoted search path privilege-escalation in Windows releases of Palo Alto GlobalProtect App/Agent. A local, authenticated user who can create files at the root of C:\ or in Program Files could gain SYSTEM privileges. Affected versions: GlobalProtect Agent 5.0.x before 5.0.5 and 4...

CVE-2020-1987 Global Protect Agent: VPN cookie local information disclosure

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

CVE-2020-1988 Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

CVE-2020-1989 Global Protect Agent: Incorrect privilege assignment allows local privilege escalation

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...

CVE-2020-1987

Affected software: Palo Alto Networks GlobalProtect Agent/App (Windows/macOS). Vulnerability: Information disclosure in the logging component when troubleshooting logging level is set to “Dump”; an authenticated, local attacker can read VPN cookie information. Affect version(s): GlobalProtect Age...

Security Bulletin: Authentication Bypass, Arbitrary Directory Deletion, and Command Injection vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4208, CVE-2020-4214, CVE-2020-4206, CVE-2020-4241, CVE-2020-4242)

Summary IBM Spectrum Protect Plus is vulnerable to authentication bypass, arbitrary directory deletion, and command injection which allows a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4208 DESCRIPTION: IBM Spectrum Protect Plus contains hard-cod...

Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus

Summary There are multiple security vulnerabilities in the Linux Kernel that affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2019-19252 DESCRIPTION: Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds write flaw in the...

IBM Spectrum Protect Plus Command Execution Vulnerability (CNVD-2020-20698)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

IBM Spectrum Protect Plus Path Traversal Vulnerability (CNVD-2020-20703)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A path traversal vulnerability exists in IB...