Security Bulletin: IBM Data Science Experience Local is affected by how it is encrypting external data source credentials

Summary IBM Data Science Experience Local has addressed the following vulnerability. Data Science Experience Local is has incorrect usage of encryption. Some keyes in Data Science Experience Local are stored in clear text next to the data that it encrypts. Vulnerability Details CVEID: Not...

Security Bulletin: IBM Data Science Experience Local is affected by continuous traffic to a US Softlayer server

Summary IBM Data Science Experience Local has addressed the following vulnerability. After installing DSX Local, the cluster will try to reach out to an external IP located on Softlayer in the US. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 4.3 CV...

Security Bulletin: IBM Data Science Experience Local is affected by how we store keystore and truststore passwords

Summary IBM Data Science Experience Local has addressed the following vulnerability. Data Science Experience Local is hardcoding the keystore truststore passwords. The 1.2.1 release fixes this vulnerability. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base...

Security Bulletin: IBM Data Science Experience Local is affected by a cryptography vulnerability

Summary IBM Data Science Experience local has addressed the following vulnerability. IBM Data Science Experience Local implements insecure algorithms for encrypting external data source credentials. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 6.3...

Security Bulletin: A security vulnerability has been identified in HAProxy shipped with Data Science Experience Local

Summary HAProxy is shipped as a component of Data Science Experience Local. Information about a security vulnerability affecting HAProxy has been published in a security bulletin. Vulnerability Details Please consult the security bulletins: CVE-2018-10184, CVE-2018-11469 for vulnerability details...

Go Pro Fusion Studio 1.2 Privilege Escalation

Summary Go Pro Fusion Studio is a feature rich editing software that allows you to transform your content into pro-quality videos. Description The application suffers from an unquoted search path issue impacting the service 'GoProFusionDeviceDetectionService' for Windows deployed as part of GoPro...

Security Bulletin: IBM Data Science Experience Local is affected by a information disclosure vulnerability.

Summary IBM Data Science Experience local has addressed the following vulnerability. IBM Data Science Experience Local could expose highly sensitive information to a local unprivileged user. Vulnerability Details CVEID: CVE-2018-1681 DESCRIPTION: IBM Data Science Experience Local could expose...

Security Bulletin: IBM Data Science Experience Local is affected by a Use of Hard-coded Password vulnerability

Summary IBM Data Science Experience Local has addressed the following vulnerability. Password for Data Science Experience Local Hadoop Integration Knox Gateway was hard-coded. Password for Data Science Experience Local Keystore and Truststore was hard-coded. Credentials for Data Science Experienc...

Security Bulletin: IBM Data Science Experience Local is affected by a cryptography vulnerability

Summary IBM Data Science Experience Local has addressed the following vulnerability. The same Data Science Experience Local JWT certificate was being used for all Data Science Experience Local instances. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score:...

Security Bulletin: IBM Data Science Experience Local is affected by a Cross-Site Scripting vulnerability

Summary IBM Data Science Experience Local has addressed the following vulnerability. IBM Data Science Experience Local was susceptible to cross-site scripting attacks against the User Management and Dataview services. Vulnerability Details Vulnerability Details CVEID: Not Applicable DESCRIPTION: ...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

web.scienceforums.com XSS vulnerability

Open Bug Bounty ID: OBB-662625 Description| Value ---|--- Affected Website:| web.scienceforums.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: A security vulnerability has been identified in Node.js hoek shipped with Data Science Experience Local

Summary Node.js hoek is shipped as a component of Data Science Experience Local. Information about a security vulnerability affecting Node.js hoek has been published in a security bulletin. Vulnerability Details Please consult the security bulletins: CVE-2018-3728 for vulnerability details and...

[SECURITY] [DLA 1426-1] cups security update

Package : cups Version : 1.7.5-11+deb8u4 CVE ID : CVE-2018-4180 CVE-2018-4181 CVE-2018-6553 Several vulnerabilities were discovered in CUPS, the Common UNIX Printing System. These issues have been identified with the following CVE ids: CVE-2018-4180 Dan Bastone of Gotham Digital Science discovere...

science-et-surface.fr XSS vulnerability

Open Bug Bounty ID: OBB-637043 Description| Value ---|--- Affected Website:| science-et-surface.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ecessa Edge EV150 10.7.4 CSRF Add Superuser Exploit

Summary Internet Failover and Load Balancing for Small Businesses, Stores and Branch Offices. Description The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain...

Ecessa WANWorx WVR-30 10.7.4 CSRF Add Superuser Exploit

Summary Ecessa's WANworX SD-WAN solutions increase network performance and reliability by leveraging any connection. That can be premium priced MPLS, lower cost broadband, or cellular 4G or LTE. Many of today's WAN deployments are based on older technology that was acceptable when businesses did...

Ecessa ShieldLink SL175EHQ 10.7.4 CSRF Add Superuser Exploit

Summary Ecessa's ShieldLink 60, 175, 600,1200 & 4000 are advanced, yet highly affordable secure WAN Optimization Controllers that incorporate all of the ISP/WAN link. Description The application interface allows users to perform certain actions via HTTP requests without performing any validity...

Security Bulletin: Release of GDPR ready IBM Data Science Experience Local

Summary IBM Data Science Experience Local new release is GDPR ready. Vulnerability Details For more information on GDPR and Data Science Experience Local, see IBM Data Science Experience Local considerations for GDPR readiness Affected Products and Versions Principal Product and Versions --- IBM...

Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Cryptography.InsecureAlgorithm SHA-1

Summary IBM Data Science Experience Local - Information about security vulnerability concerning use of SHA-1 encryption algorithm Vulnerability Details DSX Local used the SHA-1 encryption algorithm. Please consult this advisory for more information about the security vulnerability. CWE-327 Affect...