CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

Privilege escalation

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

CVE-2018-12148: Privilege escalation in Intel® Driver & Support Assistant before 3.5.0.1 may allow an authenticated user to execute code as administrator via local access. Affected software: Intel® Driver & Support Assistant (DSA). Root cause: privilege-granting/access control issues enabling loc...

Intel® Driver & Support Assistant and Intel® Software Asset Manager Advisory

Summary: Potential security vulnerabilities in Intel® Driver & Support Assistant, Intel® Software Asset Manager and Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing Intel® Driver & Support Assistant updates to mitigate these potential vulnerabilities...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2790 DESCRIPTION: An unspecified vulnerability...

Security Bulletin: IBM Support Assistant is affected by a WebSphere Application Server vulnerability

Summary IBM Support Assistant has addressed the vulnerability in WebSphere Application Server affecting installations using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server (CVE-2014-6457)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 1.7.0 that is used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in October 2014. One of these vulnerabilities affects the IBM Support...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details If you run your own Java code using the IBM Java Runtime...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in Apr 2017. Vulnerability Details If you run your own Java code using the IBM Java Runtime deliver...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8.0 used by IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017. Vulnerability Details If you run your own Java code using the IBM Java Runtime deliver...

Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with IBM Support Assistant Team Server (CVE-2016-0359, CVE-2016-0378, CVE-2016-5986)

Summary WebSphere Application Server is shipped with IBM Support Assistant Team Server. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-0359 DESCRIPTION: IBM WebSphere Application...

Security Bulletin: A security vulnerability has been identified in Apache Commons shipped with IBM Support Assistant Team Server (CVE-2016-3092)

Summary Apache Commons is shipped with IBM Support Assistant Team Server. Information about a security vulnerability affecting Apache Commons has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caus...

Security Bulletin: Vulnerability in IBM Java SDK affect IBM Support Assistant Team Server (CVE-2015-7575)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM Support Assistant Team Server. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details CVEID: CVE-2015-7575...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Support Assistant Team Server  (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM® Support Assistant Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly...

Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for IBM Support Assistant April 2014 CPU

Summary Multiple security vulnerabilities exist in the IBM® SDK for Java™ that is shipped with IBM Support Assistant Vulnerability Details The IBM Support Assistant Team Server is shipped with an IBM SDK for Java that is based on the Oracle JDK. Oracle has released April 2014 critical patch updat...

Security Bulletin: Vulnerability in SSLv3 affects IBM Support Assistant Team Server (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM® Support Assistant Team Server. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obtain...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Support Assistant Team Server July 2014 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Support Assistant Team Server. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details The following two advisories are included in the IBM® SDK Jav...

Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for IBM Support Assistant January 2014 CPU

Summary Multiple security vulnerabilities exist in the IBM® SDK for Java™ that is shipped with IBM Support Assistant Vulnerability Details The IBM Support Assistant Team Server is shipped with an IBM SDK for Java that is based on the Oracle JDK. Oracle has released January 2014 critical patch...