CVE-2015-4548

RSA Web Threat Detection before 5.1 SP1 is affected by CVE-2015-4548, a local privilege-escalation flaw where a user with a service account can inject commands into a service configuration file to obtain root privileges. The issue stems from writing to the configuration file, enabling local explo...

CVE-2015-4547

CVE-2015-4547 affects RSA Web Threat Detection before 5.1 SP1. The vulnerability is that the AnnoDB password is stored in cleartext in a system configuration file, enabling remote authenticated users to read the file and obtain the password. Impact is information disclosure that could enable data...

CVE-2015-4547

EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows remote authenticated users to obtain sensitive information by reading this file...

ESA-2015-152: RSA Web Threat Detection Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-152: RSA Web Threat Detection Multiple Vulnerabilities EMC Identifier: ESA-2015-152 CVE Identifier: CVE-2015-4547, CVE-2015-4548 Severity Rating: CVSS v2 Base Score: View details below for individual CVSS v2 scores Affected Products: · RSA® W...

EMC RSA Web Threat Detection security vulnerabilities

Information disclosure, privilege escalation...

RSA Web Threat Detection AnnoDB Password Vulnerability

RSA Web Threat Detection is a big data and security analytics solution. RSA Web Threat Detection has a security vulnerability that allows an attacker to obtain AnnoDB database passwords by viewing system configuration files...

RSA Web Threat Detection Elevation of Privilege Vulnerability

RSA Web Threat Detection is a big data and security analytics solution. A security vulnerability exists in RSA Web Threat Detection that could be exploited by a local attacker to inject special commands into a configuration file to execute arbitrary system commands with ROOT privileges...

Threat Outbreak Alert RuleID18233: Email Messages Distributing Malicious Software on September 24, 2015

Medium Alert ID: 41190 First Published: 2015 September 24 16:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18233 may contain the following files: Name ...

Microsoft repair SharePoint 2 0 1 3 XSS vulnerabilities-the vulnerabilities and early warning-the black bar safety net

SharePoint is the Microsoft Office Suite in a tool for individuals and companies to create a portal page. The vulnerabilityCVE-2 0 1 5-2 5 2 2by FortiNet's FortiGuard Labs security researchers discovered the vulnerability affects SharePoint 2 0 1 3 15.0.4571.1502 early version. SharePoint is a...

How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware

Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...

MassVet Android Malicious App Scanner

Most Android malware samples can be found clinging to some sort of knockoff to a legitimate application. Hiding in plain sight like that, sometimes they find their way into Google Play or any one of the dozens of less-patrolled Android markets. Researchers at Indiana University believe they’ve co...

Threat Outbreak Alert RuleID16616: Email Messages Distributing Malicious Software on July 13, 2015

Medium Alert ID: 39896 First Published: 2015 July 13 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16616 may contain the following files: Name | Siz...

ESA-2015-091: RSA® Web Threat Detection Cross-Site Request Forgery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-091: RSA® Web Threat Detection Cross-Site Request Forgery Vulnerability EMC Identifier: ESA-2015-091 CVE Identifier: CVE-2015-0541 Severity Rating: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected Products: · RSA Web Threat Detection versions prior to...

EMC RSA Web Threat Detection CSRF

No description provided...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0541

The CVE-2015-0541 issue affects RSA Web Threat Detection (RSA WTD) prior to version 5.1. It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to hijack the authenticated state of a user by tricking them into clicking crafted links or visiting malicious sites. The r...

RSA Web Threat Detection Cross-Site Request Forgery Vulnerability

RSA Web Threat Detection is a big data and security analytics solution. RSA Web Threat Detection suffers from a cross-site request forgery vulnerability that an attacker could exploit by tricking a user into clicking on a constructed link or browsing to a malicious Web site, resulting in the...

FREAK Attack: How to Protect Yourself

The recently disclosed FREAK Factoring attack on RSA Export Keys attack is an SSL/TLS vulnerability that is affecting major browsers, servers and even mobile devices. FREAK vulnerability allows the attacker to intercept HTTPS connections between vulnerable clients and servers and force them to us...

How to Detect Exploits of the GHOST Buffer Overflow Vulnerability

The GHOST vulnerability is a buffer overflow condition that can be easily exploited locally and remotely, which makes it extremely dangerous. This vulnerability is named after the GetHOSTbyname function involved in the exploit. Attackers utilize buffer overflow vulnerabilities like this one by...

Threat Outbreak Alert RuleID13353: Email Messages Distributing Malicious Software on January 30, 2015

Medium Alert ID: 37245 First Published: 2015 January 30 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13353 may contain the following files: Name |...