Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Scale (CVE-2018-1901)

Summary There is a vulnerability in IBM WebSphere Application Server, used by IBM Spectrum Scale. This issue allow a remote attacker to temporarily gain elevated privileges on the system. Vulnerability Details IBM WebSphere Application Server is used to provide graphical user interface for managi...

[SECURITY] Fedora 29 Update: docker-1.13.1-65.git1185cfd.fc29

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

3 Reasons Your Business Needs Security at the Edge

As a security professional, no one knows better than you that the attack surface is shifting and continues to expand across an ever-widening area. Our interconnected digital lives are wreaking havoc with the idea of "the perimeter." As digital attacks continue to grow in size and volume, and are...

IoT Scale Flaws Enable Denial of Service, Privacy Issues

Here is an internet of things flaw that can tip the scales to a hacker’s advantage. Researchers have discovered a bevy of flaws in a consumer smart scale that could allow hackers to launch a variety of attacks, from man-in-the-middle to denial of service attacks. Checkmarx researchers reported th...

Security Bulletin: IBM Spectrum Scale for IBM Elastic Storage Server is affected by the use of Local Read Only Cache (LROC) which may result in directory corruption and undetected data corruption in regular files.

Summary The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale where after cached data is moved from memory to the LROC device, any changes to that data should trigger invalidation of the data stored in LROC. Due to a problem with invalidation logic, it is possible for th...

DEBIAN-CVE-2019-7327

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

UBUNTU-CVE-2019-7327

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

DEBIAN-CVE-2019-7328

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...

UBUNTU-CVE-2019-7328

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...

PT-2019-18532 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable scale parameter value in the "frame.php" file, due to omitted proper...

PT-2019-18533 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable scale parameter value in the view frame. This is due to the omission ...

Security Bulletin: Vulnerabilities in Bash affect multiple products shipped with Intelligent Cluster (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Information about security vulnerabilities affecting multiple products shipped as components of Intelligent Cluster has been published in security bulletins. Vulnerability Details Abstract Information about security vulnerabilities affecting multiple products shipped as components of...

2019 and Beyond: The (Expanded) RSAC Advisory Board Weighs in on What’s Next: Pt. 2

Our first 2019 predictions post from the RSA Conference Advisory Board was not all sunshine and roses — cautious optimism was tabled by the acknowledged distance we must still travel as an industry — and our second set of predictions does not belie that theme. This trepidation does not mean we’re...

ICEPick-3PC: A Sophisticated Adware That Collects Data En Masse

A strain of malware that spreads on the web via advertising platforms has mounted a large-scale, mass data harvesting campaign, opening up thousands of Android users to follow-on attacks. Researchers said it’s likely there’s an organized crime ring operating behind the scenes. Named ICEPick‐3PC b...

IBM Spectrum Scale Detection (HTTP)

Detection of IBM Spectrum Scale. The script sends a connection request to the server and attempts to detect IBM Spectrum Scale and to extract its version. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2018-1993

CVE-2018-1993 affects IBM Spectrum Scale (GPFS) when Local Read Only Cache (LROC) is enabled, potentially causing a read operation to return data from a different file. The issue is reported across multiple releases of IBM Spectrum Scale/Elastic Storage Server, including ESS 4.0.x–4.6.0, ESS 4.5....

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

Default configuration

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...

CVE-2018-1993

IBM Spectrum Scale GPFS 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache LROC is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440...