Unprotected Storage Of Credentials

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs provisioning and configuration management of predefined standard operating...

UBUNTU-CVE-2015-1320

The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...

CVE-2015-1320

The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...

CVE-2019-1834

A vulnerability in the internal packet processing of Cisco Aironet Series Access Points APs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected AP if the switch interface where the AP is connected has port security configured. The...

Citrix Provisioning Console Error: 0x00000057 - Invalid Parameter

Citrix Provisioning does not support VHD based vDisks on 4K storage in any Citrix Provisioning product version. Microsoft's VHD file specification only supports a disk logical sector size of 512 bytes. A read/write access VHD on 4K disk will trigger read-modify-write emulation, which results in...

UBUNTU-CVE-2019-0816

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'...

DEBIAN-CVE-2019-0816

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'...

CVE-2019-0816

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'...

[SECURITY] Fedora 30 Update: WALinuxAgent-2.2.38-1.fc30

The Microsoft Azure Linux Agent supports the provisioning and running of Li nux VMs in the Microsoft Azure cloud. This package should be installed on Linux disk images that are built to run in the Microsoft Azure environment...

Cisco Prime Collaboration Provisioning Unauthorized Password Change Denial of Service Vulnerability (cisco-sa-20180801-pcp-dos

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is prior to 12.3. It is, therefore, affected by unauthorized password change denial of service vulnerability which could allow the attacker to cause the affected device to become inoperable,...

Design/Logic Flaw

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface...

CVE-2017-7510

The CVE-2017-7510 issue affects ovirt-engine 4.1 where a host provisioned with cloud-init could have its root password exposed via the REST API. The connected sources corroborate that the REST interface exposes data used in cloud-init, including the root password, introducing high-impact risk (CV...

CVE-2017-7510

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface...

The vulnerability of the PowerOn Auto Provisioning (POAP) mechanism in the network operating system of Cisco NX-OS switches allows a perpetrator to gain access to other devices.

The vulnerability of the PowerOn Auto Provisioning POAP mechanism in the network operating system of Cisco NX-OS switches involves errors during the automated device deployment process. Exploiting this vulnerability allows a malicious actor to download and execute malicious configuration scenario...

Azure SSH Keypairs Security Feature Bypass Vulnerability

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init. Extraneous Microsoft service public keys can be unexpectedly added to the VM authorized keys file in the limited scenarios described in 4491476. For more...

Action Recommended to Secure the Cisco Nexus PowerOn Auto Provisioning Feature

Cisco Nexus devices support an automatic provisioning or zero-touch deployment feature called PowerOn Auto Provisioning POAP. This feature assists in automating the initial deployment and configuration of Nexus switches. POAP is enabled by default and activates on devices that have no startup...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8976)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to an input validation flaw when processing parameter. Successful exploitation could result in arbitrary code execution...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director Editions

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM Systems Director and Tivoli Provisioning Manager for OS Deployment which are shipped as components of IBM Systems Director Editions. Information aboutthe security vulnerability affectin...

Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Systems Director Editions

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that affects Tivoli Common Reporting, Tivoli Provisioning Manager for OS deployment and IBM Systems Director which are shipped as part of IBM Systems Director Editions. These issues were disclosed as part of the IBM Jav...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting with IBM System Director Editions.

Summary Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting are shipped as components of IBM Systems Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Summary Tivoli...