556 matches found
Data Protection and the GDPR Job Market
The May 2018 deadline for full GDPR compliance will be upon us all before we know it. The GDPR will affect all organizations—regardless of their location—that handle personal data coming out of the EU. Article 37 of the GDPR requires organizations to retain a data protection officer DPO if, among...
Arbitrary file deletion
Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name...
Roombas will Spy on You
The company that sells the Roomba autonomous vacuum wants to sell the data about your home that it collects. Some questions: What happens if a Roomba user consents to the data collection and later sells his or her home -- especially furnished -- and now the buyers of the data have a map of a home...
Code injection
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299...
CVE-2017-1176
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299...
CVE-2017-1176
CVE-2017-1176 affects IBM Maximo Asset Management 7.1, 7.5, and 7.6. It is a local information-disclosure vulnerability caused by inappropriate retention of attachments, allowing a local user to obtain sensitive information. The NVD notes partial confidentiality impact (C) with low overall severi...
IBM Maximo Asset Management Local Information Disclosure Vulnerability
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A local...
How To Remove Old Session Recording Files From File Server And Database
As a part of normal maintenance, use the REMOVE command with additional switches to purge the database and the file structure of files. The purged files are based on the number of days configured using the RETENTION parameter For further information on the commands used in this article see the...
Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability
The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...
CVE-2016-6100
IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...
UPM Doesn't Migrate Local User Profiles Since Version 5.4.1
In UPM 5.4.1 and later versions, UPM doesn't migrate local user profiles to UPM store. Then users who are using local profile is unable to retain their personal settings by UPM...
Description of Update Rollup 5 for System Center 2012 R2 Data Protection Manager
Description of Update Rollup 5 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for Upda...
MS16-107: Description of the security update for Outlook 2013: September 13, 2016
MS16-107: Description of the security update for Outlook 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Yahoo Ordered to Explain Data Gathering Procedures in Deleted Email Case
Yahoo has been given until August 31 to comply with a court order asking how the company was able to recover emails that were presumed deleted. Yahoo’s policy guide claims it cannot recover emails from a user’s account that have been deleted but defense lawyers for a convicted U.K. drug trafficke...
Uber: Session retention is present which reveals the customer info
Issue : Session retention is present at partner.uber.com which reveals all senstive data Steps to reproduce : 1Login to partner.uber.com under any driver profile 2navigate to summary page or any page e.g payment page 3logout the application 4press back button of the application application reveal...
Can Scientists 'Upload Knowledge' Directly into your Brain to Teach New Skills?
Imagine the world where you do not have to make any efforts to learn new skills or knowledge. Just like new programs are uploaded to a Robot to teach them new skills, What if new skills are uploaded to your brain to make you learn, say, playing Guitar, a whole language like French or German or...
IBM Cognos Business Intelligence Tivoli Common Reporting Elevation of Privilege Vulnerability
IBM Cognos Business Intelligence BI and IBM Tivoli Common Reporting TCR are both products of IBM Corporation, U.S.A. BI is a set of business intelligence software. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such...
Every Call You Make or Text You Send, They'll Be Tracking From Today
From today, every phone call you make, every text message you send and every email you write will compulsorily be tracked by the government agencies under a new metadata retention scheme. Yes, you heard right. If you are a citizen of Australia with a mobile phone and an Internet connection, your...
CVE-2015-1970
The CVE-2015-1970 entry concerns IBM WebSphere DataPower XC10 appliances (versions 2.1 to 2.1.0.3 and 2.5 to 2.5.0.4) where data is retained on SSD cards. The root cause is data being stored on SSDs in a way that could allow physically proximate attackers to obtain sensitive information by removi...