PT-2023-27902 · Unknown · Apollo Router

Name of the Vulnerable Software and Affected Versions: Apollo Router versions 1.28.0 through 1.29.0 Description: The Apollo Router is subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when GraphQL Subscriptions are enabled. This can be triggered...

The vulnerability of the Active IQ Unified Manager, a tool for managing the state and performance of data storage systems, stems from deficiencies in access control. This allows attackers to update subscriptions to EMS.

The vulnerability of the Active IQ Unified Manager, a tool for managing system storage performance and status, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to update subscriptions to EMS through unauthorized channels...