CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

CVE-2020-8011

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot controller component. A remote attacker can crash the Controller service...

CA Unified Infrastructure Management Null Pointer Dereference Vulnerability

CA Unified Infrastructure Management is a unified IT monitoring solution that helps organizations deliver reliable, flexible IT services. A null pointer dereference vulnerability exists in the robot component in CA Unified Infrastructure Management 9.20 and earlier. A remote attacker could exploi...

CA Unified Infrastructure Management ACL Mishandling Vulnerability

CA Unified Infrastructure Management is an IT monitoring solution. An ACL mishandling vulnerability exists in the robot component of CA Unified Infrastructure Management 9.20 and earlier. A remote attacker can exploit this vulnerability to execute commands and perform read/write operations on the...

CA Unified Infrastructure Management Buffer Overflow Vulnerability

CA Unified Infrastructure Management is a unified IT monitoring solution that helps organizations deliver reliable, flexible IT services. A buffer overflow vulnerability exists in the robot component in CA Unified Infrastructure Management 9.20 and earlier. A remote attacker could exploit this...

Return Of Bleichenbacher's Oracle Threat

ROBOT is the return of a 19-year-old vulnerability that allows performing RSA decryption and signing operations with the private key of a TLS server. Recent assessments: busterb at May 09, 2019 5:57pm UTC reported: The details are pretty heavily documented on robotattack.org, so no need to...

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to a Robot Security Vulnerability (CVE-2017-6168)

Summary IBM Sterling B2B Integrator is vulnerable to a robot security vulnerability. This could allow an attacker to obtain encrypted data in clear text. Vulnerability Details CVEID: CVE-2017-6168 DESCRIPTION: F5 BIG-IP virtual servers configured with a Client SSL profile could allow a remote...

CVE-2018-19441

An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secretkey values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to...

CloudBees Jenkins Robot Framework Plugin Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Robot...

CVE-2020-2092

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents...

CVE-2020-2092

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents...

Xxe

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents...

CVE-2020-2092

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents...

CVE-2020-2092

CVE-2020-2092 affects Jenkins Robot Framework Plugin (versions ≤ 2.0.0). The issue is that the XML parser is not configured to prevent XML External Entity (XXE) attacks, enabling users with Job/Configure to submit crafted XML documents that may expose secrets, enable SSRF, or cause denial of serv...

PT-2020-15298 · Jenkins · Jenkins Robot Framework Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Robot Framework Plugin versions 2.0.0 and earlier Description: The issue allows users with specific permissions to have Jenkins parse crafted XML documents, potentially leading to extraction of secrets from the Jenkins controller,...

CVE-2019-10205

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry...

PT-2020-2293 · Red Hat · Red Hat Quay

Name of the Vulnerable Software and Affected Versions: Red Hat Quay affected versions not specified Description: A flaw in Red Hat Quay allows robot account tokens to be stored in plain text. This could enable an attacker, who can perform database queries in the Red Hat Quay database, to use thes...

ROS communications-related packages input validation error vulnerability

ROS communications-related packages is a package related to ROS Robot Operating System communications. An input validation error vulnerability exists in parseOptions in the tools/rosbag/src/record.cpp file in ROS communications-related packages version 1.14.3 and earlier. The vulnerability stems...

ROS communications-related packages denial of service vulnerability

ROS communications-related packages is a package related to ROS Robot Operating System communications. A security vulnerability exists in ROS communications-related packages version 1.14.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2019-13445

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...