229 matches found
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664
CVE-2020-8664 is reported in the Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy advisory (RHSA-2020:0734). The issue is an incorrect Access Control when using SDS with a Combined Validation Context in Envoy, which could affect access controls across multiple resources and is one of severa...
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664: Improper Authentication
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
PT-2020-5134
Name of the Vulnerable Software and Affected Versions CNCF Envoy versions 1.13.0 and earlier Description The issue is related to incorrect Access Control when using SDS with Combined Validation Context in CNCF Envoy. This could lead to the "static" part of the validation context not being applied...
sds-avto.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1094240 Security Researcher geeknik Helped patch 8908 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sds-avto.com website and i...
WS-2019-0519
In Envoy v1.9.0 and v1.9.1, it was possible to have two filter chains that didn't have proto equivalent FilterChainMatches, yet had semantically equivalent matchers. E.g. when one filter chain has a not-yet-implemented field. This led to a situation where the first filter chain might register for...
Solaris 10 (sparc) : 146085-08
Oracle Solaris Cluster 3.3: SDS/SVM Mediator patch for Oracle Sola. Date this patch was last updated by Sun : Jun/21/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid110656;...
Solaris 10 (x86) : 146086-08
Oracle Solaris Cluster 3.3: SDS/SVM Mediator patch for Oracle Sola. Date this patch was last updated by Sun : Jun/21/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid110657;...
Security Bulletin: Multiple security vulnerabilities has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2016-5983 and CVE-2016-5986)
Summary IBM Websphere Application Server is shipped as a component of IBM Security/Tivoli Directory Server. Information about a security vulnerabilities affecting IBM Websphere Application Server has been published in security bulletins. Vulnerability Details Please see following security bulleti...
CVE-2017-10963
CVE-2017-10963 – Samsung Knox : In Knox SDS IAM and EMM 16.11 on Samsung devices, a man‑in‑the‑middle attacker can inspect traffic from a Samsung server and inject content during the update sequence, allowing installation of arbitrary apps into the Knox container without user knowledge. These app...
PT-2018-5308
Name of the Vulnerable Software and Affected Versions Knox SDS IAM and EMM version 16.11 Description A man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting content at a certain...
CVE-2017-10963: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...
PT-2017-18072
Name of the Vulnerable Software and Affected Versions EMC ScaleIO version 2.0.1.x Description A vulnerability in message parsers, including MDM, SDS, and LIA, could potentially allow an unauthenticated remote attacker to send specifically crafted packets, causing a denial of service situation by...
QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities
Exploit for jsp platform in category web applications 1. --- Advisory details --- Title: QuantaStor Software Define Storage mmultiple vulnerabilities Advisory ID: VVVSEC-2017-6943 Advisory URL: http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt Date published: 12/08/2017 CVE...
Lenovo StorSelect DX8200C HyperStore Use-after-free in the IPv6 implementation of the DCCP protocol in the Linux kernel - Lenovo Support US
No description provided...