PT-2022-4262 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a lack of protection for service data in Windows Defender, which could allow an attacker to gain unauthorized access to a device. It enables attackers to...

PT-2022-4306 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...

When curl < 7.84.0 saves cookies alt-svc and hsts data to local files it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation it might accidentally *widen* the permissions for the target file leaving the updated file accessible to more users than intended.

...

PT-2022-3943 · Microsoft · Windows L2Tp +1

Name of the Vulnerable Software and Affected Versions: Windows Layer 2 Tunneling Protocol L2TP affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Windows, which is associated with insufficient protection of service dat...

The vulnerability in the implementation of the “info-get” configuration module for the “guestinfo.ignition.config.data” library in the Ignition library allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the info-get guestinfo.ignition.config.data configuration implementation in the Ignition library is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the MediaError message in the Mozilla Firefox browser, which allows a violator to disclose protected information

The vulnerability of the MediaError message in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-5939

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.84.0 Description The issue is related to how curl saves cookies, alt-svc, and hsts data to local files. When curl performs this operation, it uses a temporary file that is later renamed to the final target filename...

The vulnerability of the Desired State Configuration service in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Operating System’s Desired State Configuration service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-6871 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.1.7 through 11.2.1 Description: The issue is related to a lack of protection for service data in IBM Cognos Analytics, which could allow a low-level user to obtain sensitive information from the details of the...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability in the implementation of the io-workqueue in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the io-workqueue implementation of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

PT-2022-3042 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient protection of service data in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may...

The vulnerability of the Kubernetes ArgoCD application deployment automation tool, related to the lack of protection for service data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability in the implementation of the configuration comparison function of the command-line utility cURL allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the configuration comparison function in the cURL command-line utility is related to insufficient protection of service data when working with the IPv6 protocol. Exploiting this vulnerability can allow a remote attacker to establish an incorrect connection, where one...

The vulnerability of the print spooler daemon in Windows operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with insufficient protection of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows a hacker to gain unauthorized access to information.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information...

The vulnerability of the transaction interface of the PackageKit package manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the transaction interface of the PackageKit package manager is related to insufficient protection of service data. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...

The vulnerability of the Convert2RHEL tool, related to insufficient protection of service data, allows a hacker to crack the user’s password.

The vulnerability of the Convert2RHEL tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to obtain user passwords using the command line...