CVE-2019-12113: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected...

PT-2020-9287

Name of the Vulnerable Software and Affected Versions ONAP SDNC versions prior to Dublin Description An issue was discovered in ONAP SDNC where an authenticated user can execute an arbitrary command by executing sla/printAsXml with a crafted module parameter. All SDC setups that include admportal...

CVE-2019-12132: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected...

Actionable Searching and Data Download with Vulnerability Management Dashboards

Qualys is introducing the ability to download data from your vulnerability management dashboards. With Qualys Vulnerability Management Dashboards, you can use Qualys Query Language QQL to query the data in your subscription and build vulnerability- and asset-centric dashboards that show your...

The Benefits of a Single Provider DNS Platform

I've written in previous blogs about the value of using DNS as a security control point and how using a DNS based security solution like Akamai's Enterprise Threat Protector can help accelerate your transition to a Zero Trust security approach. In this blog, I'm going to cover how in addition to...

Cisco IOS Software IP Service Level Agreement Denial of Service Vulnerability

According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS software, which could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual...

Launching the Melbourne Scrubbing Centre

We are excited to announce the launch of Akamai's newest scrubbing centre in Australia. While Akamai has been protecting ANZ customers from large and complex DDoS attacks for years, the new Melbourne scrubbing centre will allow us to provide higher resilience and reduce latency for in-region...

New 3-Second DDoS Mitigation SLA is 3x Faster and the Industry’s Best

Back in 2018, we made waves with a groundbreaking DDoS Mitigation SLA service level agreement for our DDoS Protection service that guaranteed to mitigate DDoS attacks in under 10 seconds. Now, we’ve upped the ante to ensure DDoS attack mitigation with a new, industry-best three seconds-or-less...

CVE-2019-1737

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

Design/Logic Flaw

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

CVE-2019-1737 Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

CVE-2019-1737

Cisco IOS and IOS XE IP SLA Denial of Service (CVE-2019-1737) arises from improper socket resources handling in the IP SLA responder, allowing an unauthenticated remote attacker to craft SLA packets and wedge an interface, leading to a DoS on affected devices. Affected products are Cisco IOS and ...

Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

CVE-2019-1737: Uncontrolled Resource Consumption

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

PT-2019-1729

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE software affected versions not specified Description A vulnerability in the processing of IP Service Level Agreement SLA packets could allow an unauthenticated, remote attacker to cause an interface wedge an...

Moderate: Red Hat Security Advisory: openstack-octavia security and bug fix update

An update for openstack-octavia is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

My short review of “The Forrester Wave: Vulnerability Risk Management, Q1 2018”

Last week, March 14, Forrester presented new report about Vulnerability Risk Management VRM market. You can purchase it on official site for $2495 USD or get a free reprint on Rapid7 site. Thanks, Rapid7! I've read it and what to share my impressions. I was most surprised by the leaders of the...

HackerOne: Extra program metrics disclosed via /PROGRAM_NAME json response

Summary: The response to www.hackerone.com/PROGRAM.json includes slamissedcount slafailedcount and researchercount. Description: Viewing the response from a program's json endpoint includes the values for slamissedcount, slafailedcount and researchercount. With regards to the SLA metrics, these a...

Cisco IOS multiple security vulnerabilities

RSVP DoS, IKE DoS, NAT implementation DoS, Smart Install client DoS, SPT DoS, IP SLA DoS, SIP DoS...

CVE-2013-1148

The General Responder implementation in the IP Service Level Agreement SLA feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service device reload via crafted 1 IPv4 or 2 IPv6 IP SLA packet...