Azure SSH Keypairs Security Feature Bypass Vulnerability

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init. Extraneous Microsoft service public keys can be unexpectedly added to the VM authorized keys file in the limited scenarios described in 4491476. For more...

Action Recommended to Secure the Cisco Nexus PowerOn Auto Provisioning Feature

Cisco Nexus devices support an automatic provisioning or zero-touch deployment feature called PowerOn Auto Provisioning POAP. This feature assists in automating the initial deployment and configuration of Nexus switches. POAP is enabled by default and activates on devices that have no startup...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8976)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to an input validation flaw when processing parameter. Successful exploitation could result in arbitrary code execution...

Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Systems Director Editions

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that affects Tivoli Common Reporting, Tivoli Provisioning Manager for OS deployment and IBM Systems Director which are shipped as part of IBM Systems Director Editions. These issues were disclosed as part of the IBM Jav...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director Editions

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM Systems Director and Tivoli Provisioning Manager for OS Deployment which are shipped as components of IBM Systems Director Editions. Information aboutthe security vulnerability affectin...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting with IBM System Director Editions.

Summary Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting are shipped as components of IBM Systems Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Summary Tivoli...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment, IBM System Director and Tivoli Common Reporting with IBM System Director Editions. (CVE-2014-3513,CVE-2014-3567 and CVE-2014-3568)

Summary Tivoli Provisioning Manager for OS Deployment, IBM System Director and Tivoli Common Reporting are shipped as components of IBM System Director Editions. Information about the security vulnerabilities affecting these components has been published in thesecurity bulletins listed below...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment which is shipped with IBM Systems Director Editions.(CVE-2015-0159,CVE-2014-6221)

Summary Tivoli Provisioning Manager for OS Deployment is shipped as a component of IBM Systems Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Abstract Tivoli Provisioning Manager for OS...

Security Bulletin: A security vulnerability has been identified in Tivoli Provisioning Manager for OS Deployment, IBM Tivoli Monitoring, IBM System Director and Tivoli Common Reporting shipped with IBM System Director Editions. (CVE-2014-3566)

Summary Tivoli Provisioning Manager for OS Deployment, IBM Tivoli Monitoring, IBM System Director and Tivoli Common Reporting are shipped as components of IBM System Director Editions. Information about the security vulnerability affecting these components has been published in the security...

Security Bulletin: TLS padding vulnerability has been identified in IBM Tivoli Provisioning Manager for OS Deployment and IBM Tivoli Monitoring shipped with IBM System Director Editions. (CVE-2014-8730)

Summary IBM Tivoli Provisioning Manager for OS Deployment and IBM Tivoli Monitoring are shipped as components of IBM System Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Abstract IBM...

KB4480976 causes issue with pagefile redirection on Windows 10 v1803 with PVS

After installing Microsoft updateKB4480976 on a provisioned Windows 10 v1803, 'Performance Options' popup may appear with no paging file set.This issue is not seen with other versions of Windows 10...

FTW - Framework For Testing WAFs

This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP requests that will trigger these rules...

Security Bulletin: Security vulnerability has been identified in IBM Tivoli Monitoring, Tivoli Provisioning Manager for OS Deployment and IBM Tivoli Monitoring for Energy Management shipped with IBM System Director Editions (CVE-2014-0963, CVE-2014-0076)

Summary A security vulnerability has been identified in IBM Tivoli Monitoring, Tivoli Provisioning Manager for OS Deployment and IBM Tivoli Monitoring for Energy Management shipped with IBM System Director Editions. CVE-2014-0963, CVE-2014-0076 Vulnerability Details Abstract IBM Tivoli Monitoring...

Citrix Provisioning Services Target Boot Up Fails with Error: "login request time out "

During device boot up, there will be an error "login request time out !"...

The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management allows a hacker to gain access to the administrative web interface with administrator privileges.

The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management involves the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to gain access to the administrative web interface with...

Is AMD processor supported for provisioning VPX?

AMD processors are supported for provisioning Citrix ADC VPX on firmware release 13.1 and above. More details are available at the Docs page - https://docs.citrix.com/en-us/citrix-adc/current-release/deploying-vpx/deploy-vpx-faq.html...

Excessive Retries Occur when a Provisioning Server Target Device is Deployed on a XenServer Platform

When the Citrix Provisioning Server target device is deployed on a XenServer platform, the device may experience some of the following symptoms: Excessive retries while performing a physical to virtual target build Slow ICA performance when using XenDesktop Freezing or locking with XenDesktop whi...

Supported Hypervisors for Citrix Virtual Apps and Desktops (MCS) and Citrix Provisioning (PVS)

Citrix is committed to ensuring that our products function with the latest partner hypervisor offering, such as Microsoft Azure, AWS, Google Cloud Platform, Nutanix Cloud Clusters on AWS, Nutanix Cloud Clusters on Azure, VMware Cloud on AWS, Azure VMware Solution, Google Cloud VMware Engine,...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8977)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to missing input validation in the serverresponse.py script. Successful exploitation could result in arbitrary file overwrite with privileges of web application process...

HackerOne: Accidental Access to Programs Information via SAML Login

On November 8th, 2018, HackerOne released software to production that contained a bug which impacted our Security Assertion Markup Language SAML authentication system. As a result of the bug, the SAML JIT Just-In-Time provisioning mechanism granted users of one customer program read-only access t...