Security Bulletin: A vulnerability in Apache Ant affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Ant was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2012-2098 DESCRIPTION: Apache Commons Compress and Apache Ant are vulnerable to a denial of service, caused by an error when using bzip2 compression to compress files. By...

Authentication Bypass Vulnerability in the Management Interface of Citrix Application Delivery Controller and Citrix Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix Application Delivery Controller ADC formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, that, if exploited, could allow an attacker with access to the management...

CVE-2019-17366 - Citrix Application Delivery Management (ADM) Console Security Update

Description of Problem An authorisation bypass vulnerability was discovered in the Citrix Application Delivery Management ADM server. The vulnerability allows a Citrix ADM user with read-only privilege to access a managed instances with admin level permissions. The following deployment scenarios...

(RHSA-2019:2896) Low: Red Hat Enterprise Linux 7.4 Extended Update Support (EUS) Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 7.4 is retired as of August 31, 2019, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical Impact...

Citrix SD-WAN Security Update

Description of Problem Multiple denial of service vulnerabilities have been identified in the Citrix SD-WAN Appliance and Citrix SD-WAN Center Management Console. These vulnerabilities could permit a remote attacker to cause a denial of service by causing a host crash or by causing reduced servic...

Qualys Policy Compliance Notification: Policy Library Updates (June)

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

Security Bulletin: Vulnerabilities in WebSphere Application Server

Summary There are vulnerabilities in WebSphere Application Server used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1902 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to spoof connection information which could ...

MAC Receiver/Workspace app sporadically closes

Customer's will start a published application or desktop and at random intervals the Viewer application will close with no errors or messages. This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and ca...

Citrix Hypervisor Security Update.

Description of Problem A vulnerability has been found in Citrix Hypervisor formerly Citrix XenServer that may allow an unauthenticated attacker with the ability to send traffic to a host over a management or storage network to cause the host to crash. This vulnerability is identified as: •...

Security Bulletin: IBM InfoSphere Information Analyzer and Information Governance Catalog is affected by an Information Disclosure vulnerability

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Information Analyzer and Information Governance Catalog. Vulnerability Details CVEID: CVE-2019-4257 DESCRIPTION: IBM InfoSphere Information Analyzer is affected by an information disclosure vulnerability. Sensitive...

Personalized Customer Support that Garners a Personalized Thank You

In my two-plus years as a Technical Support Engineer at Imperva, I’ve handled a wide variety of customer cases. And I’ve had the satisfaction of helping resolve them quickly and successfully. But never before have I received a handwritten thank you note from an effusive customer. Let me start at...

Security Bulletin: IBM InfoSphere Information Server is affected by an Improper Authentication vulnerability

Summary An Improper Authentication vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-1906 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to download code using a specially crafted HTTP request. CVSS Base Score...

Security Bulletin: IBM InfoSphere Information Server is affected by an Information Disclosure vulnerability

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-1917 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to access jsp files and disclose sensitive information. CVSS Base Score:...

Failed to launch session "session_name". Error code: 2502 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error is returned by the Citrix Gateway to Citrix CWA app when application/desktop...

Dell Computer comes with system software, SupportAssist presence of a RCE vulnerability-vulnerability warning-the black bar safety net

! You use the computer what is the brand? You have on your computer system pre-installed or comes with the security of the software produced a suspect? When we talk about remote code execution vulnerability, RCE, may most people would think of it andoperating systemvulnerabilities, but there is n...

Spam and phishing in Q1 2019

Quarterly highlights Valentine's Day As per tradition, phishing timed to coincide with lovey-dovey day was aimed at swindling valuable confidential information out of starry-eyed users, such as bank card details. The topics exploited by cybercriminals ranged from online flower shops to dating...

Failed to launch session "session_name". Error code: 2523 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by a Reflected XSS (Cross-Site Scripting) vulnerability

Summary A Reflected XSS Cross-Site Scripting vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2018-1895 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: IBM InfoSphere Governance Catalog is vulnerable to an Open Redirection vulnerability

Summary An Open Redirection vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2018-1875 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim ...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by an Improper Access Control vulnerability

Summary An Improper Access Control vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2018-1899 DESCRIPTION: IBM InfoSphere Information Server could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due...