PT-2023-27904

Name of the Vulnerable Software and Affected Versions Fides versions 2.11.0 through 2.19.0 Description The Fides webserver API allows custom integrations to be uploaded as a ZIP file, which can contain YAML files and custom Python code. The custom code is executed in a restricted environment, but...

Tackling the OAuth2 Client component model in Spring Security

In Spring Security 5, we saw many developments in the OAuth2 story with the introduction of OAuth2 Resource Server and OAuth2 Client into the framework. Today, it is quite convenient to develop applications that are secured by OAuth2 using the features available in OAuth2 Resource Server...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a hacker to bypass existing security restrictions.

The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-68779)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

The vulnerability of the AppSandbox component in macOS operating systems allows a hacker to bypass the protective mechanisms of the isolated software environment.

The vulnerability of the AppSandbox component in macOS operating systems is related to security configuration errors. Exploiting this vulnerability could allow an attacker to bypass the security measures of the isolated software environment...

The vulnerability of the macOS operating system’s kernel allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the macOS operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to security configuration errors, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability in the implementation of the Remote Desktop Protocol on Windows operating systems allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the Remote Desktop Protocol implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...

CVE-2023-34034

Using "" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass...

Security feature bypass

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352...

CVE-2023-35898 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352...

CVE-2023-35898

IBM InfoSphere Information Server 11.7 contains an information disclosure vulnerability in the Data Flow Designer component (DataStage Flow Designer) caused by an insecure security configuration. An authenticated user could obtain sensitive information due to this misconfiguration. Remediation pe...

The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2023-35898)

Summary DataStage Flow Designer is an internal component of IBM InfoSphere Information Server. An information disclosure vulnerability in the DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2023-35898 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticat...

The vulnerability of the Mozilla Firefox browser on Windows operating systems, related to security configuration errors, allows attackers to access confidential information.

The vulnerability of the Mozilla Firefox browser on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information using a created .scf script...

CVE-2023-23468 IBM Robotic Process Automation for Cloud Pak access control

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500...