CVE-2019-12405

CVE-2019-12405 affects Apache Traffic Control (Traffic Ops API) when LDAP login is enabled. Versions 3.0.0 and 3.0.1 are exposed to an improper authentication vulnerability that could allow a user authenticated via LDAP to impersonate another user without the target user’s password. This is docum...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

Authentication Bypass

github.com/apache/trafficcontrol is vulnerable to authentication bypass. Failure to properly handle LDAP authentication errors allow a remote attacker to authenticate as a valid user without providing the correct password...

Apache Traffic Control Authentication Vulnerability

Apache Traffic Control is the United States Apache Apache Software Foundation of a distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. An authentication vulnerability exists in Apache Traffic Control, which stems from...

Improper Authentication

Improper authentication is possible in Apache Traffic Control versions if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct password...

Alleviating Digital Transformation Performance and Security Concerns

Businesses across the world are migrating applications to the cloud to reduce IT cost and complexity, and accelerate the pace of innovation. But when you move applications and services to the cloud you lose visibility and control over your infrastructure, increasing risk and uncertainty. That's w...

A week in security (November 12 – 18)

Last week on Malwarebytes Labs, we found out that TrickBot became a top business threat, so we took a deeper look at what's new with it. With Christmas just around the corner, the Secret Sister scam returned. We also touched on the security and privacy or lack thereof in smart jewelry, air traffi...

Compromising vital infrastructure: air traffic control

While most of us know that flying is the safest mode of transport, we still feel that sigh of relief when the plane has made its landing on the runway and we can text our loved ones that we have arrived safe and sound. Accidents may be rare, but they're often shocking and horrific and accompanied...

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P01 TI x-stream Codename: TIIP2 V1.05.P01 ThermiC...

FLIR Systems FLIR Thermal Traffic Cameras Websocket Device Manipulation

!/usr/bin/env python -- coding: utf-8 -- FLIR Systems FLIR Thermal Traffic Cameras Websocket Device Manipulation Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P...

Threat Outbreak Alert RuleID33408: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58696 First Published: 2018 August 14 18:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33408 may contain the following files: Name |...

Threat Outbreak Alert RuleID33279: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58672 First Published: 2018 August 13 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33279 may contain the following files: Name |...

Threat Outbreak Alert RuleID33090: Email Messages Distributing Malicious Software on July 4, 2018

Medium Alert ID: 58360 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33090 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID33038: Email Messages Distributing Malicious Software on June 22, 2018

Medium Alert ID: 58272 First Published: 2018 June 22 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33038 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32972: Email Messages Distributing Malicious Software on June 14, 2018

Medium Alert ID: 58179 First Published: 2018 June 14 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32972 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32841: Email Messages Distributing Malicious Software on May 25, 2018

Medium Alert ID: 57968 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32841 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32813: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57942 First Published: 2018 May 23 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32813 may contain the following files: Name | Size...

TIBCO DataSynapse GridServer Manager GridServer Broker, GridServer Driver and GridServer Engine Component Server Encryption Misuse Vulnerability

TIBCO DataSynapse GridServer Manager is a management system for managing GridServer environments from TIBCO Software, Inc. GridServer Broker is a workload management component; GridServer Driver is a driver component; GridServer Broker is a workload management component; GridServer Driver is a...

Threat Outbreak Alert RuleID32727: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57834 First Published: 2018 May 8 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32727 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32728: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57833 First Published: 2018 May 8 19:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32728 may contain the following files: Name | Size ...