Security Bulletin: Vulnerability in SSLv3 affects WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. Vulnerability Details CVE-ID:...

Security Bulletin: Multiple security vulnerabilities exist in the IBM SDK, Java Technology Edition provided with WebSphere eXtreme Scale

Summary Three security vulnerabilities were identified in the IBM® SDK, Java™ Technology Edition provided with WebSphere eXtreme Scale. Vulnerability Details CVEID: CVE-2014-0878 DESCRIPTION: A vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic...

Security Bulletin: WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance client vulnerability (CVE-2013-6734)

Summary In certain configurations, a security vulnerability exists in WebSphere eXtreme Scale Client, the client that is used with WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance. WebSphere eXtreme Scale Client might allow cached HTTP session data of one user to be accessed by a...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

Design/Logic Flaw

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

CVE-2018-1431

CVE-2018-1431 is a GSKit vulnerability affecting IBM Spectrum Scale components (notably GPFS-based deployments) that could allow a local attacker to gain control of the Spectrum Scale daemon and read/modify files, potentially elevating privileges. Connected IBM bulletins enumerate affected releas...

CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node...

Outpost24 Appsec Scale for Web Application Scanning

Today I would like to write about yet another Outpost24 product - cloud Web Application Scanner Appsec Scale. It is available in the same interface as Outpost24 Outscan, that I reviewed earlier. Select APPSEC SCALE in the start menu and you can scan web applications: New application If you don't...

May 17, 2018—KB4103724 (Preview of Monthly Rollup)

None None...

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows, allowing attackers to execute arbitrary code with root privileges or trigger service interruptions.

The vulnerabilities of the IBM Spectrum Scale and General Parallel File System data storage management software are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code with root privileges or cause service interruptions...

Huawei Honor Body Fat Scale App Information Disclosure Vulnerability

The Huawei Honor Body Fat Scale app is the official mobile software that accompanies a smart electronic scale from Huawei. The Huawei Honor Body Fat Scale app suffers from an information leakage vulnerability, which is due to the program's failure to strictly restrict access to resources for...

CVE-2017-17322

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could caus...

CVE-2017-17322

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could caus...

Information disclosure

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could caus...

CVE-2017-17322

Huawei Honor Smart Scale Application (version 1.1.1) is affected by CVE-2017-17322, an information disclosure vulnerability caused by insufficient access restrictions on certain resources via a protocol. An attacker could mislead a user into clicking a malicious link, potentially leading to infor...

CVE-2017-17322

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could caus...

Security Advisory - Information Disclosure Vulnerability on Honor Smart Scale Application

There is an information disclosure vulnerability on Honor Smart Scale application. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information...

How to Perform a Partial Site Upgrade in NetScaler SD-WAN 10.0

NetScaler SD-WAN 10.0 has been designed to accommodate large scale deployments, with the capability of supporting up to 2500 sites. The partial site upgrade feature is one enhancement that will accommodate such large scale deployments. This feature allows administrators to stage upgrades at...

IBM Spectrum Scale Information Disclosure Vulnerability (CNVD-2018-05069)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The solution supports helping clients reduce storage costs while improving security and management efficiency in...