4753 matches found
PT-2024-14044 · Qstar · Qstar Archive Solutions
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions Release RELEASE 3-0 Build 7 Patch 0 Description: The issue is related to incorrect access control, allowing unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server...
QStar Archive Solutions Security Breach
QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, CD-ROM libraries, WORM and clouds private and hybrid. A security vulnerability exists in QStar Archive Solutions RELEASE3-0 Build 7 release that stems from the presence of an...
CVE-2023-51066
An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands...
CVE-2023-51068
CVE-2023-51068 affects QStar Archive Solutions RELEASE_3-0 Build 7. The vulnerability is an authenticated reflected cross-site scripting (XSS) in which an attacker can trigger arbitrary JavaScript in a victim’s browser via a crafted link. Root cause is an XSS flaw in the handling of links within ...
CVE-2023-51070
CVE-2023-51070 concerns QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0. The issue is described as an access-control flaw that allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. The affected software is QStar Archive Solutions Release RE...
QStar Archive Solutions Security Breach
QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, optical libraries, WORM and clouds private and hybrid. A security vulnerability exists in the QStar Archive Solutions RELEASE3-0 Build 7 release, which stems from a DOM-based...
QStar Archive Solutions Security Breach
QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, optical libraries, WORM and clouds private and hybrid. A security vulnerability exists in QStar Archive Solutions RELEASE3-0 Build 7 version that stems from the presence of a...
CVE-2023-51067
The CVE-2023-51067 entry describes an unauthenticated reflected XSS in QStar Archive Solutions Release RELEASE_3-0 Build 7, enabling an attacker to run arbitrary JavaScript in a victim’s browser via a crafted link. The connected documents consistently reference the same vulnerability description ...
CVE-2023-51064
CVE-2023-51064 affects QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The qnme-ajax component’s tree_table endpoint (method=tree_table) is vulnerable to a DOM-based reflected XSS, enabling an attacker-controlled script to be executed in the victim’s browser as described across multiple sour...
PT-2024-14047 · Qstar · Qstar Archive Solutions
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions version RELEASE 3-0 Build 7 Description: The issue is related to an authenticated reflected cross-site scripting XSS vulnerability. This allows attackers to execute arbitrary javascript on a victim's browser via a...
CVE-2023-51066
CVE-2023-51066 describes an authenticated remote code execution in QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The vulnerability is network-attackable and requires low privileges with no user interaction; impact is high on confidentiality, integrity, and availability. Several sources (NV...
CVE-2023-51062
Summary : CVE-2023-51062 affects QStar Archive Solutions, RELEASE_3-0 Build 7 Patch 0. An unauthenticated read of the log-smblog-save component can disclose SMB log contents when a crafted command is executed. The NVD/CVSS indicates network access with low complexity and no privileges required, r...
QStar Archive Solutions Security Breach
QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, optical libraries, WORM and clouds private and hybrid. A security vulnerability exists in the QStar Archive Solutions RELEASE3-0 Build 7 release, which stems from a DOM-based...
GHSA-CHCR-X7HC-8FP8 Devise-Two-Factor vulnerable to brute force attacks
Advisory withdrawn The backing CVE has been rejected Devise-Two-Factor does not throttle or otherwise restrict login attempts at the server by default. When combined with the Time-based One Time Password algorithm's TOTP inherent entropy limitations, it's possible for an attacker to bypass the 2F...
PT-2024-14048 · Qstar · Qstar Archive Solutions +1
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions Release RELEASE 3-0 Build 7 Patch 0 Description: An access control issue allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. Recommendations: For QStar Archive Solutions...
PT-2024-14042 · Qstar · Qstar Archive Solutions
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions version RELEASE 3-0 Build 7 Patch 0 Description: A DOM Based Reflected Cross Site Scripting XSS issue was found in the qnme-ajax component, specifically in the method=tree level endpoint. This allows for potential...
PT-2024-14041 · Qstar · Qstar Archive Solutions
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions version RELEASE 3-0 Build 7 Patch 0 Description: The issue allows attackers to disclose the SMB Log contents via executing a crafted command, specifically through an unauthenticated log file read in the component...
PT-2024-14049 · Unknown · Qstar Archive Solutions
Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions Release RELEASE 3-0 Build 7 Patch 0 Description: An access control issue allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link...
Devise-Two-Factor vulnerable to brute force attacks
Devise-Two-Factor does not throttle or otherwise restrict login attempts at the server by default. When combined with the Time-based One Time Password algorithm's TOTP inherent entropy limitations, it's possible for an attacker to bypass the 2FA mechanism through brute-force attacks. Impact If a...
