Cloudtoken Information Disclosure Vulnerability

Cloudtoken is a command line utility used in Unix environments to provide authentication capabilities. An information disclosure vulnerability exists in Cloudtoken versions 0.1.1 excluding version 0.1.1 through 0.1.24 excluding version 0.1.24, which can be exploited by an attacker to obtain...

PYSEC-2018-1

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

CVE-2013-0487

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN...

Code injection

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN...

CVE-2013-0487

Summary of CVE-2013-0487 (IBM Domino Java Console) : The vulnerability affects IBM Lotus Domino 8.5.x where the Java Console can allow remote authenticated users to hijack temporary credentials by exploiting configuration details (SPR KLYH8TNNDN). The NVD entry lists a high impact (CVSSv2 8.5) wi...

PT-2013-2379

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x Description The Java Console in IBM Domino allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details. Recommendations For IBM Domino versions 8.5.x, at the...