CVE-2024-33891

CVE-2024-33891 (Delinea Secret Server) : Affects Secret Server versions prior to 11.7.000001. The issue enables authentication bypass via the SOAP API at SecretServer/webservices/SSWebService.asmx, linked to a hardcoded key, the Admin user being represented as the integer 2, and removal of the oa...

IBM Security Verify Privilege Information Disclosure Vulnerability

IBM Security Verify Privilege is a solution from International Business Machines IBM that manages and protects user identities and privileges. An information disclosure vulnerability exists in IBM Security Verify Privilege, which can be exploited by an attacker to obtain sensitive information fro...

CVE-2024-31887

IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP API. IBM X-Force ID: 287651...

CVE-2024-31887

IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP API. IBM X-Force ID: 287651...

CVE-2024-31887 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP API. IBM X-Force ID: 287651...

CVE-2024-31887

The CVE-2024-31887 issue affects IBM Security Verify Privilege On-Premises v11.6.25, where an unauthenticated actor could obtain sensitive information via the SOAP API, representing an information disclosure risk (CVSS v3.1 base score 7.5). The Red Hat/IBM bulletin confirms the affected version a...

CVE-2024-31887 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP API. IBM X-Force ID: 287651...

Security Bulletin: IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive information (CVE-2024-31887)

Summary IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive information. The issue has been addressed in an update. Vulnerability Details CVEID:CVE-2024-31887 DESCRIPTION: IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive...

PT-2024-24267 · Ibm · Ibm Security Verify Privilege

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege version 11.6.25 Description: The issue allows an unauthenticated actor to obtain sensitive information from the SOAP API. Recommendations: For IBM Security Verify Privilege version 11.6.25, consider restricting...

IBM Security Verify Privilege 安全漏洞

IBM Security Verify Privilege is a solution from International Business Machines IBM that manages and protects user identities and privileges. An information disclosure vulnerability exists in IBM Security Verify Privilege, which can be exploited by an attacker to obtain sensitive information fro...

PT-2024-3333 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...

Top 3 API Leaks Identified by Cybersecurity & InfoSec Experts

APIs Application Programming Interfaces have proliferated widely, which increases their susceptibility to various vulnerabilities. In the realm of web applications, prime examples that stand out are SOAP Simple Object Access Protocol and Representational State Transfer REST APIs. Due to their...

TP-LINK AX50 Cross Site Scripting Vulnerability

TP-LINK AX50 is a router device from China P&L TP-LINK. A cross-site scripting vulnerability exists in TP-LINK AX50 version 1.0.11 build 2022052. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to...

Fedora: Security Advisory for jakarta-saaj (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for jakarta-xml-ws (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: jakarta-saaj-3.0.0-6.fc40

Jakarta SOAP with Attachments defines an API enabling developers to produce and consume messages conforming to the SOAP 1.1, SOAP 1.2, and SOAP Attachments Feature...

[SECURITY] Fedora 40 Update: jakarta-xml-ws-4.0.0-6.fc40

Jakarta XML Web Services defines a means for implementing XML-Based Web Services based on Jakarta SOAP with Attachments and Jakarta Web Services Metadata...

BIT-SUITECRM-2020-8804

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module...

BIT-PHP-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

BIT-PHP-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...