CVE-2017-14014

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2017-14012

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

Hardcoded credentials

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

Design/Logic Flaw

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2017-14014

Summary of CVE-2017-14014 : The Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI before it is transferred to removable media. This creates a vulnerability (CWE-321: Use of Hard-coded Cryptographic Key) with CVSS3 base score 4.6 (vector AV:P/AC:L/PR...

CVE-2017-14014

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2017-14012

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2017-14012

Mode C: The CVE-2017-14012 entry concerns Boston Scientific ZOOM LATITUDE PRM Model 3120. The vulnerability is due to a hard-coded cryptographic key used to encrypt PHI before transfer to removable media, resulting in PHI not being encrypted at rest. Affected product: ZOOM LATITUDE PRM – Model 31...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20180410)

Security Fixes : - glibc: realpath buffer underflow when getcwd returns relative path allows privilege escalation CVE-2018-1000001 - glibc: Buffer overflow in glob with GLOBTILDE CVE-2017-15670 - glibc: Buffer overflow during unescaping of user names with the operator CVE-2017-15804 - glibc: deni...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20180410)

Security Fixes : - krb5: Authentication bypass by improper validation of certificate EKU and SAN CVE-2017-7562 - krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure CVE-2017-11368 Additional Changes : C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : patch on SL7.x x86_64 (20180423)

Patch should be installed because it is a common way of upgrading applications. Security Fixes : - patch: Malicious patch files cause ed to execute arbitrary commands CVE-2018-1000156 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : corosync on SL7.x x86_64 (20180417)

Security Fixes : - corosync: Integer overflow in exec/totemcrypto.c:authenticatenss23 function CVE-2018-1084 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109460; scriptversion"1.9";...

Scientific Linux Security Update : PackageKit on SL7.x x86_64 (20180424)

Security Fixes : - PackageKit: authentication bypass allows to install signed packages without administrator privileges CVE-2018-1106 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109463; scriptversion"1.6";...

Scientific Linux Security Update : pcs on SL7.x x86_64 (20180410)

Security Fixes : - pcs: Privilege escalation via authorized user malicious REST call CVE-2018-1079 - pcs: Debug parameter removal bypass, allowing information disclosure CVE-2018-1086 - rack-protection: Timing attack in authenticitytoken.rb CVE-2018-1000119 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20180410)

This update upgrades Firefox to version 52.7.3 ESR. Security Fixes : - firefox: Use-after-free in compositor potentially allows code execution CVE-2018-5148 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109445;...

Scientific Linux Security Update : libvncserver on SL7.x x86_64 (20180410)

Security Fixes : - libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c CVE-2018-7225 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109451; scriptversion"1.4";...

Scientific Linux Security Update : librelp on SL7.x x86_64 (20180424)

Security Fixes : - librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c CVE-2018-1000140 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109464; scriptversion"1.6";...

Scientific Linux Security Update : openssh on SL7.x x86_64 (20180410)

Security Fixes : - openssh: Improper write operations in readonly mode allow for zero- length file creation CVE-2017-15906 Additional Changes : C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109454; scriptversion"1.4";...

Scientific Linux Security Update : xdg-user-dirs on SL7.x x86_64 (20180410)

Security Fixes : - xdg-user-dirs, gnome-session: Xsession creation of XDG user directories does not honor system umask policy CVE-2017-15131 Additional Changes : C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109459;...

Scientific Linux Security Update : libvorbis on SL7.x x86_64 (20180410)

Security Fixes : - Mozilla: Vorbis audio processing out of bounds write MFSA 2018-08 CVE-2018-5146 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109452; scriptversion"1.8";...