113 matches found
IntelÂŽ SCS Add-on for Microsoft*Â Advisory
Summary: A potential security vulnerability in the IntelÂŽ Setup and Configuration Software SCS Add-on for Microsoft System Center Configuration Manager SCCM may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEI...
CVE-2020-5389
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contains an information disclosure vulnerability. Authenticated low-privileged OMIMSCC users may retrieve sensitive information from logs. The connected records (NVD, CNVD, CVE listing...
CVE-2020-5389
Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...
CVE-2020-5374
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM/SCVMM versions prior to 7.2.1 contains a hard-coded cryptographic key vulnerability. A remote, unauthenticated attacker could potentially access appliance data on remotely managed devices. Affected version range is SCC...
CVE-2020-5373
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM, versions prior to 7.2.1, contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to retrieve the managed deviceâs system inventory data. Affected component: OMIMS...
CVE-2020-5374: Plaintext Storage of a Password
Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...
ManageEngine AssetExplorer Authenticated Command Execution Vulnerability
ManageEngine AssetExplorer versions prior to 6.5 6503 suffer from an authenticated remote command execution vulnerability. ManageEngine AssetExplorer Authenticated Command Execution Vulnerability Identifiers ------------------------------------------------- CVE-2019-19034...
ManageEngine AssetExplorer Authenticated Command Execution
XL-2020-004 - Asset Explorer Windows & Linux - Authenticated Command Execution =============================================================================== Identifiers ------------------------------------------------- CVE-2019-19034 XL-20-004 CVSSv3 score...
App Layering Recipe: How to deploy Microsoft SCCM in a layer
...
CVE-2020-11533
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...
CVE-2020-11533
Ivanti Workspace Control vulnerability CVE-2020-11533: versions prior to 10.4.30.0 with SCCM integration enabled disclose keying material to local users. Impact is sensitive information disclosure; no exploit details are provided in the sources. Remediation: upgrade to 10.4.30.0 or later (as indi...
CVE-2020-11533
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...
CVE-2020-11533: Undefined Security Weakness
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...
PT-2020-12670
Name of the Vulnerable Software and Affected Versions Ivanti Workspace Control versions prior to 10.4.30.0 Description The issue allows local users to obtain sensitive information, specifically keying material, when SCCM integration is enabled. Recommendations For versions prior to 10.4.30.0,...
CVE-2019-19034
Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager SCCM database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM...
CVE-2019-19034
Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager SCCM database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM...
CVE-2019-19034
AssetExplorer 6.5 by Zoho is affected by CVE-2019-19034 due to lack of validation of the SCCM database username when dynamically generating the command to schedule SCCM scans. This enables an attacker to execute arbitrary commands on the AssetExplorer server with NT AUTHORITY/SYSTEM privileges (a...
CVE-2019-19034: Improper Neutralization of Special Elements used in an OS Command
Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager SCCM database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM...
