DEBIAN-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

ALPINE-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

UBUNTU-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

OSV-2020-1589 UNKNOWN READ in RegisterSetjmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24695 Crash type: UNKNOWN READ Crash state: RegisterSetjmp wasmtimeruntime::traphandlers::CallThreadState::with::hada2d3d104ef56de wasmtime::func::invokewasmandcatchtraps::h25a8cbd9f03c9a30...

RHEL 8 : kernel (RHSA-2020:1372)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1372 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: local user can read...

CVE-2020-11993: Inconsistent Interpretation of HTTP Requests

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

JetBrains Security Bulletin Q2 2020

FYI News Security JetBrains Security Bulletin Q2 2020 Robert Demmer In the second quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity ...

IBM MQ 9.1.x < 9.2 CD / 9.1.0.x < 9.1.0.6 LTS Information Disclosure

According to its self-reported version, the IBM MQ server installed on the remote host is 9.1.x prior to 9.2 CD, or 9.1.0.x prior to 9.1.0.6 LTS, and is therefore affected by an information disclosure vulnerability due to the inclusion of sensitive information in trace files. An unauthenticated,...

CVE-2019-4731

IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616...

Information disclosure

IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616...

CVE-2019-4731

IBM MQ Appliance vulnerability CVE-2019-4731 allows a local attacker to obtain highly sensitive information by including sensitive data in traces. Affected: IBM MQ Appliance 9.1.4 CD. Root cause: information disclosure via trace data. Impact: partial confidentiality loss; no integrity/availabilit...

CVE-2019-4731: Exposure of Sensitive Information to an Unauthorized Actor

IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616...

PT-2020-11047

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance version 9.1.4.CD Description The issue allows a local attacker to obtain highly sensitive information due to the inclusion of sensitive data within a trace. Recommendations For IBM MQ Appliance version 9.1.4.CD, at the moment,...

(0Day) IBM Informix bts_tracefile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of IBM Informix. Authentication is required to exploit this vulnerability. The specific flaw exists within the btstracefile function. When parsing the trace filename, the process does not properly...

PT-2020-6746

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 79 Mozilla Firefox ESR versions prior to 78.1 Thunderbird versions prior to 78.1 Description The issue is related to information leakage in error messages. It allows a remote attacker to disclose protected...

CVE-2020-4498

IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118...

Information disclosure

IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118...

CVE-2020-4498

IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118...

Security Bulletin: IBM MQ Appliance is affected by inclusion of sensitive data within trace (CVE-2019-4731)

Summary IBM MQ Appliance has addressed the following inclusion of sensitive data within trace vulnerability. Vulnerability Details CVEID: CVE-2019-4731 DESCRIPTION: IBM MQ Appliance could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. CV...

PT-2020-18101

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance versions 9.1 LTS and 9.1 CD Description The issue allows a local privileged user to obtain highly sensitive information due to the inclusion of data within trace files. Recommendations For IBM MQ Appliance versions 9.1 LTS and...