CVE-2020-4498: Insertion of Sensitive Information into Log File

IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118...

Security Bulletin: HTTP Trace Method is enabled

Summary HTTP Trace Method is enabled Vulnerability Details Third Party Entry: PSIRT-ADV0017246 DESCRIPTION: Created from Advisory: ADV0017246 CVSS Base score: 5.3 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products and Versions Affected Products| Versions ---|--- UCD - IBM...

DEBIAN-CVE-2020-15945

Lua 5.4.0 fixed in 5.4.1 has a segmentation fault in changedline in ldebug.c e.g., when called by luaGtraceexec because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Information Disclosure (CVE-2019-4583)

Summary IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. Vulnerability Details CVEID: CVE-2019-4583 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to obtain...

CVE-2020-4498

IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118...

PT-2020-22637

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving gc mark string, gc trace, and gs gc reclaim. N...

Collecting smaller Server-side Wireshark traces on PVS

PVS Wireshark traces can get very large and could use up a lot of resources. Here is a method that can be used to reduce the size of the traces and the impact on the PVS server. With the smaller trace file and lower impact, the trace can run longer and the resulting files are easier to handle...

SAP Solution Manager Injection Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

Input validation

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

CVE-2020-6261

SAP Solution Manager (Trace Analysis) 7.20 is affected. The issue allows log injection into the trace file due to incomplete XML validation, impairing readability of trace files. No explicit remediation or patch version is provided in the connected documents. References point to SAP notes/wiki en...

OSV-2020-518 Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13481 Crash type: Global-buffer-overflow READ 1 Crash state: perfetto::traceprocessor::ParseSystraceTracePoint perfetto::traceprocessor::ProtoTraceParser::ParsePrint perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacke...

OSV-2020-376 Heap-buffer-overflow in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14767 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::fuchsiatraceutils::ReadTimestamp perfetto::traceprocessor::FuchsiaTraceParser::ParseTracePacket...

PT-2020-22455

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a crash in the perfetto trace processor. The crash occurs due to an unknown read error. Technical details about the crash include the involvement of specific function...

PT-2020-22414

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a crash in the perfetto trace processor. The crash occurs in the perfetto::trace processor::ProtoTraceParser::ParsePowerRails function, which is called by...

CVE-2020-6261: Improper Input Validation

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

PT-2020-19056

Name of the Vulnerable Software and Affected Versions SAP Solution Manager Trace Analysis version 7.20 Description The issue allows an attacker to perform a log injection into the trace file due to incomplete XML validation, impairing the readability of the trace file. Recommendations For SAP...