vDisks not Synchronized Between the Local Stores of the Provisioning Service Servers.

vDisks are not synchronized properly between the local stores of both PVS servers. Replication Status shows vdisks files missing for some of the versions...

CVE-2016-9211

A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an unauthenticated, remote attacker to cause the controller card to unexpectedly reload. More Information: CSCuw26032. Known Affected Releases: 10.51...

CVE-2016-9211

CVE-2016-9211 affects Cisco ONS 15454 Series Multiservice Provisioning Platforms. The vulnerability arises in TCP port management where a local management TCP port is inadvertently exposed, enabling an unauthenticated, remote attacker to cause the controller card to unexpectedly reload/reset. Imp...

Important: Red Hat Security Advisory: CFME 5.6.3 security, bug fix, and enhancement update

An update is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

Foreman 1.11.x < 1.11.4, 1.12.0 Information Disclosure Vulnerability

Foreman is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:theforeman:foreman";...

Foreman < 1.11.1 Information Disclosure Vulnerability

Foreman is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:theforeman:foreman";...

CVE-2016-6451

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

CVE-2016-6451

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

Cross site scripting

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

CVE-2016-6451

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

CVE-2016-6451

CVE-2016-6451 concerns Cisco Prime Collaboration Provisioning. The Cisco advisory and NVD entry describe multiple vulnerabilities in the web framework code that could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against users of the web interface. The r...

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Som...

Cisco Patches Critical Vulnerability in Facility Events Response System

Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...

Design/Logic Flaw

The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization RHEV Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files...

PT-2016-6427 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Engine version 4.0 Description: The issue allows local users to obtain sensitive database provisioning information. This is achieved by reading log files, specifically those generated by the...

Moderate: Red Hat Security Advisory: org.ovirt.engine-root security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Unable To Create Machines Via Provisioning Services - Console Error: "pbm.fault.PBMFault.summary when attempting to create virtual machines"

While trying to create VMs via PVS, the following error is displayed:...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.2 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

satellite6: stored XSS while provisioning new host

A cross-site scripting XSS flaw was found in the "Device Identifier" field of the new host provisioning components of Red Hat Satellite. A user able to create a new host could exploit this flaw to perform XSS attacks against other Satellite users...

Cisco Prime Collaboration Provisioning 9.0.x / 11.0.x < 11.1 Local Privilege Escalation (cisco-sa-20160209-pcp)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.0.x or 11.0.x prior to 11.1. It is, therefore, affected by a local privilege escalation vulnerability in its command line interface due to improper sanitization of user-supplied input. A...