PT-2024-4825 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.2.34646 Description: The issue is related to insufficient protection of registration data in the Access Token Handler component. This could allow a remote attacker to gain unauthorized access to...

The vulnerability of the JetBrains plugin for GitHub-integrated development environments for software such as JetBrains Aqua, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, MPS, PhpStorm, PyCharm, Rider, RubyMine, RustRover, and WebStorm allows attackers to escalate their privileges.

The vulnerability of the JetBrains GitHub-integrated development environments for software products such as Aqua, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, MPS, PhpStorm, PyCharm, Rider, RubyMine, RustRover, and WebStorm is related to insufficient protection of registration data...

The vulnerability of GE HealthCare EchoPAC medical software, related to insufficient protection of registration data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of GE HealthCare EchoPAC medical software is related to insufficient protection of registration data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the microprogrammed software of the MELSEC iQ-R Series Safety CPU and Series SIL2 Process CPU modules, related to insufficient protection of registration data, allows a intruder to obtain the account information.

The vulnerability of the microprogramming software for MELSEC iQ-R Series Safety CPUs and Series SIL2 Process CPUs is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain login credentials by eavesdropping on...

The vulnerability of the PostgreSQL software component used in Brocade SANnav network management systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PostgreSQL software component used in Brocade SANnav network management systems is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Vulnerability of FortiOS operating systems and FortiProxy proxy servers in protecting against internet attacks, due to insufficient protection of registration data, allowing attackers to perform arbitrary actions.

The vulnerability of the FortiOS operating systems and the proxy server used for protecting against Internet attacks related to FortiProxy lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided...

The vulnerability of the cross-platform integrated development environment for software, JetBrains Rider, arises from insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of the cross-platform integrated software development environment JetBrains Rider is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the programming tools for programmable logic controllers (PLCs), EcoStruxure Control Expert and EcoStruxure Process Expert, arises from insufficient protection of registration data. This allows a malicious individual to gain unauthorized access to the project file.

The vulnerability of the programming tools for programmable logic controllers PLCs, EcoStruxure Control Expert and EcoStruxure Process Expert, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project...

The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential classes in the Azure Identity Library for .NET allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential classes in the Azure Identity Library for .NET relates to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2024-2773 · Microsoft · Azure Identity Library For .Net

Name of the Vulnerable Software and Affected Versions: Azure Identity Library for .NET versions prior to the fixed version Description: The vulnerability in the Azure Identity Library for .NET is related to insufficient protection of registration data, which can allow an attacker to gain...

The vulnerability of the logging function of the Kibana data visualization service allows a perpetrator to disclose protected information.

The vulnerability of the logging function of the Kibana data visualization service is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of software for remote management and monitoring of the Intel Local Manageability Service arises from insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the software for remote management and monitoring of the Intel Local Manageability Service is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WithRoundTripper() function in the library for integrating applications with cloud-based infrastructure, CloudEvents sdk-go, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WithRoundTripper function in the library for integrating applications with cloud-based infrastructure, the CloudEvents sdk-go, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

The vulnerability of the Apache Linkis application connection, management, and orchestration software lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Linkis application connection, management, and orchestration software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Dell EMC NetWorker backup and data recovery system, related to insufficient protection of registration data, allows a perpetrator to obtain user registration data.

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security stem from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security stem from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

The vulnerability of platformes for monitoring events, detecting threats, and conducting security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security stem from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...