Cloudflare WARP 安全漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connectivity from the American company Cloudflare. Cloudflare WARP suffers from a security vulnerability that stems from the ability for a user to remove a VPN profile from the WARP mobile client on the iOS platform, despite the Lo...

PT-2022-22585 · Warp · Warp

Name of the Vulnerable Software and Affected Versions: WARP affected versions not specified Description: The issue allows a user to disconnect the WARP client and bypass the "Lock WARP switch" feature by using the warp-cli command "add-trusted-ssid". This results in Zero Trust policies not being...

PT-2022-21737 · Unknown · Warp Client

Name of the Vulnerable Software and Affected Versions: WARP Client affected versions not specified Description: The issue allows bypassing policies configured for Zero Trust Secure Web Gateway. This can be achieved by using the warp-cli command with the set-custom-endpoint subcommand and specifyi...

PT-2022-21776 · Cloudflare · Cloudflare Warp

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP mobile client affected versions not specified Description: The issue allowed a user to delete a VPN profile from the WARP mobile client on the iOS platform, despite the Lock WARP switch feature being enabled on the Zero Trust...

PT-2022-21746 · Cloudflare · Cloudflare Warp

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP iOS mobile client affected versions not specified Description: The issue allowed users to bypass the Lock WARP switch feature on the WARP iOS mobile client. This was possible by enabling both "Disable for cellular networks" an...

Error connecting to PVS Farm with Credentials from trusted domain using Selective Trust

When connecting to the PVS Farm "localhost" with credentials from a trusted domain, an error is thrown that reads: "Error Domain Controller" and "unable to connect to the domain Controller if any or the default rootDSE. Error code: 60075030, message: Access is denied Exception from HRESULT:...

keylime 安全漏洞

Keylime is an open source extensible trust system for Keylime that utilizes TPM technology. There is a security vulnerability in Keylime, there is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor announcement...

ansible-freeipa bug fix and enhancement update

An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...

Secure your endpoints with Transparity and Microsoft

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Endpoint protection platforms EPPs are dead and no longer sufficient to protect your organization, right? Wrong. When it comes to cybersecurity, the ability to normalize and correlat...

Secure your endpoints with Transparity and Microsoft

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Endpoint protection platforms EPPs are dead and no longer sufficient to protect your organization, right? Wrong. When it comes to cybersecurity, the ability to normalize and correlat...

Apple watchOS 信任管理问题漏洞

Apple watchOS is an operating system for smartwatches from Apple, Inc. A security vulnerability exists in Apple watchOS, which stems from the handling of maliciously constructed certificates that could lead to the execution of arbitrary code...

Lanner IAC-AST2500A 信任管理问题漏洞

The Lanner IAC-AST2500A is a module and accelerator card from Lanner. It is suitable for Lanner network devices to support remote management and monitoring of system operation based on the IPMI standard. A trust management issue vulnerability exists in the Lanner IAC-AST2500A standard firmware...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:3688-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3688-1 advisory. The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in...

IBM MQ Appliance 信任管理问题漏洞

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from International Business Machines IBM. A security vulnerability exists in IBM MQ Appliance. An attacker could exploit the vulnerability to perform a cross-site request forgery attack...

Abode Iota 信任管理问题漏洞

Abode Iota is a reliable Diy home security system from Abode. A trust management issue vulnerability exists in Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z, which stems from an authentication bypass in the web interface /action/factory functionality, which can be exploited by an...

CVE-2022-41592

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application TA.Successful exploitation of this vulnerability may affect the fingerprint service...

Adobe ColdFusion trust management issue vulnerability

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a trust management issue vulnerability that...

Siemens Industrial Edge Management Trust Management Issue Vulnerability

Siemens Industrial Edge Management, a platform from Siemens Germany, is used to host applications from different vendors on a computing platform close to the shop floor. issue vulnerability, which stems from the fact that when initiating a TLS connection, the affected software does not properly...

Scribe Platform: End-to-end Software Supply Chain Security

As software supply chain security becomes more and more crucial, security, DevSecOps, and DevOps teams are more challenged than ever to build transparent trust in the software they deliver or use. In fact, in Gartner recently published their 2022 cybersecurity predictions - not only do they...

Trend Micro Apex One Trust Management Issue Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. Trend Micro Apex One 2019 on-prem, SaaS version has a trust management issue vulnerability that stems from the Apex One agent not being properly authenticated, which could be exploited by an attacker to load DLL files...