Cisco Prime Collaboration Provisioning 10.6.x / 11.0.x < 11.0.0.815 Web Framework SQLi (cisco-sa-20151008-pcp)

According to its self-reported version number, the Cisco Prime Collaboration Provisioning PCP device is 10.6.x or 11.0.x prior to 11.0.0.582. It is, therefore, affected by a SQL injection vulnerability in the web framework component due to improper sanitization of user-supplied input before using...

The vulnerability of the SAP HANA database management system allows attackers to obtain confidential information or enhance their privileges.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system arises from an improper restriction on access to the functions of the service. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or...

The vulnerability of the SAP HANA database management system allows a hacker to trigger a service failure.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Uber: OneLogin authentication bypass on WordPress sites

First, I'm sorry about reporting another WordPress bug my intention was just to check if WP-OneLogin stores any sensitive info that could be used to attack OneLogin on your other websites. Overview The .uber.com WordPress sites use OneLogin SAML-SSO instead of the normal WordPress login. The...

Design/Logic Flaw

server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection...

UBUNTU-CVE-2016-2423

server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection...

SAP HANA Data Provisioning Agent Component Information Disclosure Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. The DP Agent component of SAP HANA fails to properly restrict the use of service functions, allowing remote attackers to...

SAP HANA Data Provisioning Agent Component Denial of Service Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. A security vulnerability exists in the DP Agent component of SAP HANA that allows remote attackers to submit special requests...

CVE-2016-4017

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

CVE-2016-4018

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

Information disclosure

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

CVE-2016-4018

The SAP HANA Data Provisioning Agent (DP Agent) component is affected. The DP Agent fails to properly restrict access to its service functionality, enabling remote attackers to obtain sensitive information and potentially gain privileges via unspecified vectors. Root cause cited as insufficient a...

CVE-2016-4018

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

CVE-2016-4017

CVE-2016-4017 concerns SAP HANA’s Data Provisioning Agent (DP Agent). The vulnerability enables remote attackers to cause a denial of service (process crash) via unspecified vectors, as referenced by SAP Security Note 2262710. The Connected documents corroborate this description across multiple c...

How to Reverse Image from a Virtual Disk to a Local Hard Disk with VMware ESX4

This article contains information about how to reverse an image from a virtual disk to a local hard disk with VMware ESX4. Background It is often necessary in a Provisioning Services environment to reverse an image to install a Citrix hotfix, change a driver, or do certain other tasks.To achieve...

How To Migrate vDisks From One Store to Another in Provisioning Server 7.6

How To Migrate vDisks From One Store to Another in Provisioning Server 7.6...

Managing Provisioning Services VDisk Versions with VhdUtil Tool

The Provisioning Services VhdUtil utility included in PVS 7.1 and later versions allows for the management of PVS vDisk versions outside of the PVS console, which is completely unaware of the vDisk changes made by this utility. This article will cover two commands included in the VhdUtil utility ...

Cisco Prime Collaboration Provisioning Web Interface Detection (HTTP)

HTTP based detection of the Cisco Prime Collaboration Provisioning Web Interface. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

RHEL 6 / 7 : Satellite 6.1.7 (RHSA-2016:0174)

Updated Satellite 6.1 packages that fix one security issue, add one enhancement, and fix several bugs are available for Satellite 6.1.7. Red Hat Product Security has rated this update as having Moderate Security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Moderate: Red Hat Security Advisory: Satellite 6.1.7 security, bug and enhancement fix update

Updated Satellite 6.1 packages that fix one security issue, add one enhancement, and fix several bugs are available for Satellite 6.1.7. Red Hat Product Security has rated this update as having Moderate Security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...