Security Bulletin: A vulnerability in Apache Struts affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Struts used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to protect against unintended remote...

Citrix ShareFile storage zones Controller multiple security updates

Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

Citrix Hypervisor Multiple Security Updates

Description of Problem Several issues have been identified within Citrix Hypervisor, which could, if exploited, allow: privileged code in a PV guest VM to read a single uninitialized 4kB page of memory that may contain data left by a previous VM privileged code in a guest VM to cause the host to...

Eaton HMiSoft VU3

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Eaton Equipment: HMiSoft VU3 HMIVU3 runtime not impacted Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

Palo Alto Networks VM Series firewalls trust management issue vulnerability

Palo Alto Networks VM Series firewalls is a virtualized firewall product from Palo Alto Networks, USA. A trust management issue vulnerability exists in Palo Alto Networks VM Series firewalls that stems from the inclusion of account credentials in technical support files. An attacker could exploit...

Performance Counter corruption causes StoreFront installation to fail with "An Unexpected Error occurred. Contact Citrix Technical support"

When this occurs you see the message “An Unexpected Error occurred. Contact Citrix Technical support”. This following entry appears in the StoreFront log files described in https://docs.citrix.com/en-us/storefront/current-release/troubleshoot.html: System.InvalidOperationException: The installati...

Security Bulletin: IBM InfoSphere Metadata Asset Manager is affected by a Stored cross site scripting vulnerability

Summary A Stored cross site scripting vulnerability was addressed by IBM InfoSphere Metadata Asset Manager. Vulnerability Details CVEID: CVE-2019-4618 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip...

Citrix App Layering - Error while trying to import layers

While trying to import layers, App Layering console displays an error: "An unexpected exception occurred. If this problem continues, contact Technical Support and provide them with the details of this exception". Looking at the ELM Web logs, we might see the below errors: ERROR 2832HandlerHelper:...

(RHSA-2020:0637) Low: Red Hat Satellite 5 - 90 day End Of Life Notice

After May 31, 2020, as per the life-cycle support policy for Red Hat Satellite, Red Hat will discontinue technical support services as well as software maintenance services for all Red Hat Satellite and Proxy versions 5.8 or older on Red Hat Enterprise Linux 6. The listed versions will exit the...

Moxa AWK-3131A iw_console privilege escalation vulnerability

Added: 02/27/2020 CVE: CVE-2019-5136 Background Moxa AWK-3131A is a 3-in-1 industrial wireless AP/bridge/client device. Problem A privilege escalation vulnerability exists in the iwconsole functionality where a specially crafted menu selection string can cause an escape from the restricted consol...

Citrix Receiver Error: "Check network connections" When iPad Goes into Sleep Mode

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After unlocking the iPad the Citrix Receiver Shows the following message: Connection not possible...

SharePoint Online and OneDrive for Business Backup Jobs Fail with (403) Forbidden Warning Message

Challenge SharePoint Online or OneDrive for Business backup jobs fail with the following message: Processing site https://site.sharepoint.com/sites/111/subsite finished with warning: Failed to backup item version: //1024/Shared Documents/, version: 1.0, The remote server returned an error: 403...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by a Cross-Site Request Forgery vulnerability CVE-2019-4626

Summary A Cross-Site Request Forgery vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4626 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Input validation vulnerability CVE-2019-4627

Summary An Input validation vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4627 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th...

Security Bulletin: IBM InfoSphere QualityStage is affected by a Reflected Cross-site scripting vulnerability

Summary A Reflected cross-site scripting vulnerability was addressed by IBM InfoSphere QualityStage. Vulnerability Details CVEID: CVE-2019-4756 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...

Security Bulletin: IBM® Db2® LUW on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2019-4558)

Summary Db2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version 5.0.x and 4.2.x that is used by Db2® pureScale™ Feature on AIX and Linux. IBM Spectrum Scale is previously known as General Parallel File System GPFS. Vulnerability Details CVEID: CVE-2019-4558 DESCRIPTION: A security...

Announcing New Customer Support Portal and Unified Search

Qualys is rolling out new unified search and an improved online customer support experience, along with Support content integrated directly into Qualys Community. It's coming in January 2020. These new features are part of our efforts to enable customer success with an integrated community...

Feds Crack Down on Money Mules, Warn of BEC Scams

The Justice Department said this week that it is cracking down on money mules, i.e., middlemen who assist in fraud schemes by receiving money from victims and forwarding proceeds to foreign-based perpetrators. So far, feds say they have halted more than 600 domestic money mules – exceeding the 40...

Unable to Autoupdate Workspace App for Mac 19.10/19.10.1 - Error: "An unexpected error occurred during installation"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to autoupdate Workspace App for Mac from 19.10/19.10.1 to 19.10.2 and above you will...