CVE-2021-27467

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information...

CVE-2021-27465

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

Information disclosure

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information...

CVE-2021-27465

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

CVE-2021-27461

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs...

CVE-2021-27461

CVE-2021-27461 is a path traversal vulnerability in Emerson Rosemount X-STREAM Gas Analyzer web servers. Affected products include X-STREAM enhanced XEGP, XEGK, XEFD, and XEXF (all revisions). The underlying issue allows an attacker to access stored data by crafting specific URLs, consistent with...

CVE-2021-27459

CVE-2021-27459 describes a vulnerability in Emerson Rosemount X-STREAM Gas Analyzer where the webserver allows unvalidated file uploads, enabling arbitrary code execution. This affects multiple revisions of the X-STREAM webserver components. Evidence from multiple sources (including ICSA-21-138-0...

CVE-2021-27457

CVE-2021-27457 affects Emerson Rosemount X-STREAM Gas Analyzer (X-STREAM enhanced XEGP, XEGK, XEFD, XEXF—all revisions). The root cause is inadequate encryption strength used to store sensitive data, which could allow an attacker to obtain credentials. ICSA/CISA report CVSSv3.1 base score 7.5 (hi...

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

CVE-2021-27467

The CVE-2021-27467 issue affects Emerson Rosemount X-STREAM Gas Analyzer and its web UI, where the web interface’s handling of UI rendering enables an attacker to route a user to a page controlled by the attacker, potentially exposing sensitive information. The root cause is improper restriction ...

CVE-2021-27465

The CVE-2021-27465 issue affects Emerson Rosemount X-STREAM Gas Analyzer software (XEGP/XEGK/XEFD/XEXF revisions). The vulnerability is a Cross-Site Scripting flaw in the web interface caused by unvalidated webpage input (CWE-79), enabling an attacker to modify pages and display incorrect or unde...

CVE-2021-27463

CVE-2021-27463 affects Emerson Rosemount X-STREAM Gas Analyzer. The vulnerability arises from persistent cookies where the session cookie attribute is not properly invalidated, enabling an attacker to intercept cookies and access sensitive information. Affected products include multiple X-STREAM ...

GHSA-7CHV-RRW6-W6FC XStream is vulnerable to a Remote Command Execution attack

Impact The vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

gcc-toolset-10-binutils bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

gcc-toolset-10-binutils bug fix and enhancement update

An update is available for gcc-toolset-10-binutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versio...

gcc-toolset-10-gdb bug fix and enhancement update

An update is available for gcc-toolset-10-gdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versions of...