CVE-2020-15325: Cleartext Storage of Sensitive Information

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication...

PT-2020-6772 · Zyxel · Zyxel Cloudcnm Secumanager

Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue is related to a hardcoded Erlang cookie for ejabberd replication in Zyxel CloudCNM SecuManager. Additionally, there is a problem with unencrypted storage of...

Fedora: Security Advisory for galera (FEDORA-2020-35f52d9370)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Release Information for Veeam Backup for AWS v2

Requirements IMPORTANT You cannot update Veeam Backup for AWS operating in the Paid edition to version 2.0 from the Veeam Backup for AWS Web UI. To update the product, you must install Veeam Backup for AWS version 2.0 from AWS Marketplace on a new EC2 instance, and then migrate Veeam Backup for A...

Veeam Backup & Replication — Cannot find any supported licenses for current product version.

Challenge When attempting to install a license into Veeam Backup & Replication, the following error occurs: Cannot find any supported licenses for current product version. Cause This error most often occurs when the license file being installed is for an older version of Veeam Backup & Replicatio...

Veeam Cloud Connect jobs fail with "Authentication failed because the remote party has closed the transport stream" error

Challenge After upgrade of Veeam Backup & Replication on the Veeam Cloud Connect service provider's backup server to version 10, tenant jobs may start failing with the following error: "Authentication failed because the remote party has closed the transport stream ". At the same time, the...

PT-2020-6838

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 10.14 PostgreSQL versions prior to 11.9 PostgreSQL versions prior to 12.4 Description The issue is related to the improper sanitization of the search path during logical replication in PostgreSQL, allowing an...

[SECURITY] Fedora 32 Update: galera-26.4.4-2.fc32

Galera is a fast synchronous multi-master wsrep provider replication engin e for transactional databases and similar applications. For more information about wsrep API see http://launchpad.net/wsrep. For a description of Galera replication engine see http://www.codership.com...

CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

DEBIAN-CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

UBUNTU-CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

PT-2020-13371 · Hashicorp +1 · Hashicorp Consul +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.4.0 through 1.6.5 HashiCorp Consul and Consul Enterprise versions 1.7.0 through 1.7.3 Description: The issue arises from the improper enforcement of scope for local tokens issued by a primary...

CVE-2020-13170: Improper Input Validation

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

MySQL Server Replication DoS

The vulnerability of the MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL Protocol...

Oracle MySQL Server Group Replication DoS

The vulnerability of the Server:Group Replication component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Oracle MySQL Server Group Replication DoS

The vulnerability of the Server:Group Replication Plugin component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Unable to add Nutanix AHV cluster due to empty credentials list

Challenge When trying to add a new Nutanix AHV cluster to the Veeam Backup & Replication infrastructure, the operation cannot be finished due to an empty list of credentials. Newly added credentials are not displayed in the Credentials list, and the wizard does not allow adding a new cluster...

Oracle MySQL Server Replication DoS

The vulnerability of the Server: Replication component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure using the MySQL network protocol...