PT-2019-18255

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.1.2 F5 BIG-IP versions 15.0.0 through 15.0.1 Description The issue occurs when the BIG-IP is configured in HTTP/2 Full Proxy mode, and specifically crafted requests may cause a disruption of service provide...

Updated php-pear-CAS packages fix security vulnerabilities

Updated php-pear-CAS packages fix security vulnerabilities: An XSS vulnerabilities has been fixed for proxy mode...

MGASA-2018-0452 Updated php-pear-CAS packages fix security vulnerabilities

Updated php-pear-CAS packages fix security vulnerabilities: An XSS vulnerabilities has been fixed for proxy mode...

PT-2018-19291

Name of the Vulnerable Software and Affected Versions php-pear-CAS affected versions not specified Description A security issue has been identified, specifically an XSS vulnerability that has been fixed for proxy mode. Recommendations At the moment, there is no information about a newer version...

F5 Networks BIG-IP : TMM vulnerability (K52167636)

Features in the BIG-IP system that utilizeinflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a 'Zip Bomb' attack.CVE-2017-6153 Impact BIG-IP systems deployed in Forward Proxy mode with the inflate functionality enabled a...

jolokia: JMX proxy mode vulnerable to remote code execution

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

FortiOS SSL Deep-Inspection Proxy Mode badssl.com Compliance

US-Cert published a document at which outlines some security flaws that may be introduced by the use of SSL Deep-Inspection.Â...

Jolokia Vulnerabilities - RCE & XSS(CVE-2018-1000130,CVE-2018-1000129)

Recently, during a client engagement, Gotham Digital Science found a couple of zero-day vulnerabilities in the Jolokia service. Jolokia is an open source product that provides an HTTP API interface for JMX Java Management Extensions technology. It contains an API we can use for calling MBeans...

Jolokia agent JNDI injection vulnerability

Jolokia is a use of JSON via Http to achieve JMX remote management of open source projects , it provides JMX batch operation , security policies , etc. Jolokia agent is one of the agent . Jolokia agent 1.3.7 version of the proxy mode has a security vulnerability . Remote attackers can use this...

CVE-2018-1000130

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

Remote Code Execution (RCE)

jolokia-jsr160 is vulnerable to remote code execution RCE attacks. The application does not restrict access to the server in proxy mode, allowing a malicious user to inject and execute arbitrary Java code...

Design/Logic Flaw

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

CVE-2018-1000130: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

PT-2018-9305

Name of the Vulnerable Software and Affected Versions: Jolokia agent version 1.3.7 Description: A JNDI Injection issue exists in the proxy mode, allowing a remote attacker to run arbitrary Java code on the server. Recommendations: For Jolokia agent version 1.3.7, at the moment, there is no...

Low Interaction Honeypot: honeytrap

Honeytrap is a low-interaction honeypot and network security tool written to catch attacks against TCP and UDP services. In its default configuration, it runs as a daemon and starts server processes on demand when a connection attempt to a port is made. Different modes of operation are available...

Nessus Local Denial of Service Vulnerability

Nessus is currently the most used system vulnerability scanning and analyzing software in the world. Nessus suffers from a denial of service vulnerability when running in proxy mode. A local attacker can exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode the default mode are not affected...

openSUSE Security Update : dovecot20 (openSUSE-SU-2012:0219-1)

In proxy mode dovecot did not verify that the SSL certificate of the remote actually matched the server name. Dovecot was updated to version 2.0.16 which fixes the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Security release: Symfony 2.0.19 and 2.1.4

I've just released Symfony 2.0.19 and 2.1.4. Both releases contain a security fix. Damien Tournoud, from the Drupal security team, contacted us two days ago about a security issue in the Request::getClientIp method when the trust proxy mode is enabled Request::trustProxyData. An application is...

Fedora 16 : php-pear-CAS-1.3.0-2.fc16 (2012-4119)

Upstream changelog Changes in version 1.3.0 Bug Fixes : - the saml logout url should be parsed urlencoded 24 dlineate - fix a proxy mode bug introduced in a previous comitt 16 Adam Franco - Fix includepath order so that the phpCAS path takes precedence 13 Adam Franco - fix invalid characters in t...