7691 matches found
CVE-2023-52109
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52109
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52109
The CVE-2023-52109 entry describes a Trusted Relationship Inaccuracy vulnerability affecting distributed systems. Connected sources identify Huawei HarmonyOS and EMUI as affected, describing that inaccurate trust relationships could lead to confidentiality exposure in distributed environments. Th...
CVE-2023-44117
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-44117
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-44117
Technical details (affected products, versions, root cause, exploit info) are not publicly available in the provided documents. Monitor updates from vendors and advisories.
CVE-2023-4566
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-4566
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-4566
CVE-2023-4566 describes a vulnerability in the trust relationships of distributed systems, with potential confidentiality impact. Connected sources point to Huawei HarmonyOS and EMUI as affected contexts and classify the impact as high (CVSS v3.1: 7.5, Network attack vector, no privileges require...
PT-2024-14406 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns inaccurate trust relationships in distributed scenarios, which could impact service confidentiality upon successful exploitation...
PT-2024-13172 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns inaccurate trust relationships in distributed scenarios, which could impact service confidentiality if successfully exploited. Recommendations: At the moment, there i...
EulerOS 2.0 SP9 : openssh (EulerOS-SA-2023-2882)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an...
PT-2024-13268 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inaccurate trust relationships in distributed scenarios, which could impact service confidentiality upon successful exploitation. Recommendations: At the moment,...
CVE-2023-49568
A denial of service DoS vulnerability was found in the go library go-git. This issue may allow an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which can trigger resource exhaustion in go-git clients. Mitigation In cases where a bump to...
Škoda Modular Infotainment Platform 3 Trust Management Issues Vulnerability
Škoda Modular Infotainment Platform 3 MIB3 is a modular infotainment platform from the Czech company Škoda. A security vulnerability exists in the Škoda Modular Infotainment Platform 3 MIB3 infotainment that stems from the use of hard-coded secret values...
Rapid Software Rapid SCADA Trust Management Issue Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. Rapid Software Rapid SCADA 5.8.4 and prior versions have a trust management issue vulnerability that stems from the use of hard-coded credentials, which allows an attacker to connect to a specific por...
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Impact A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the...
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Impact What kind of vulnerability is it? Who is impacted? Anyone leveraging the SignedHttpRequestprotocol or the SignedHttpRequestValidatoris vulnerable. Microsoft.IdentityModel trusts the jkuclaim by default for the SignedHttpRequestprotocol. This raises the possibility to make any remote or loc...
Webinar – Leverage Zero Trust Security to Minimize Your Attack Surface
Digital expansion inevitably increases the external attack surface, making you susceptible to cyberthreats. Threat actors increasingly exploit the vulnerabilities stemming from software and infrastructure exposed to the internet; this ironically includes security tools, particularly firewalls and...