CURL-CVE-2024-0853 OCSP verification bypass with TLS session reuse

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

OCSP verification bypass with TLS session reuse

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

UBUNTU-CVE-2024-0853

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

CVE-2024-0853

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

PT-2024-20457 · Lobe Chat · Lobe Chat

Name of the Vulnerable Software and Affected Versions: Lobe Chat versions prior to 0.122.4 Description: The issue allows access to plugins without proper authorization when the application is password-protected and deployed with the ACCESS CODE option. This means that even though the application...

Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities

Summary Information about security vulnerabilities affecting IBM DB2 has been published in security bulletins. IBM Security Verify Governance components Verify Governance, Identity Manager - Software, Identity Manager - Virtual Appliance, and Identity Manager - Container ship with IBM DB2...

PT-2024-21878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition error can occur in the Linux kernel due to the Linked list element and pointer not being stored in the same memory as the eDMA controller register. If the doorbell...

matsoftware.ca Cross Site Scripting vulnerability OBB-3842877

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the software protection mechanism for accessing applications in Docker environments. IBM Security Verify Access Docker, a access control system from IBM Security Verify Access, has a flaw related to incorrect URL definition before file access. This allows attackers to elevate their privileges to the root level.

The vulnerability of the Docker-based application access control software, IBM Security Verify Access, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow attackers to elevate their privileges to the root level...

The vulnerability of the software protection tool for accessing applications in Docker environments. IBM Security Verify Access Docker, a access management system from IBM Security Verify Access, which involves storing passwords in a reversible format. This allows attackers to exploit the protected information.

The vulnerability of the Docker-based application access control software, IBM Security Verify Access, lies in its password storage mechanism. Exploiting this vulnerability could allow attackers to disclose the protected information...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the insufficient validation of arguments passed to the command line. This allows attackers to execute arbitrary commands.

The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to insufficient validation of arguments passed to the command line. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

The vulnerability of the software protection mechanism for accessing applications in Docker environments. IBM Security Verify Access Docker, a access control system from IBM Security Verify Access, is vulnerable due to the lack of encryption measures for protected data. This allows attackers to disclose the protected information.

The vulnerability of the IBM Security Verify Access application for Docker environments stems from the lack of encryption measures for protected data. Exploiting this vulnerability can allow attackers to disclose protected information...

Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.

Summary There were multiple Security Vulnerabilities that were reported against IBM Security Verify Access. These have been addressed in IBM Security Verify Access 10.0.7.0 Vulnerability Details CVEID:CVE-2023-21968 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and GraalVM Enterpris...

Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access (CVE-2023-46158, CVE-2023-0482, CVE-2022-46364, CVE-2023-28867)

Summary Security Vulnerability fixes in IBM WebSphere Application Server Liberty and other components have been addressed in an update to IBM Security Verify Access. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could...

Security Bulletin: IBM Security Verify Privilege On-Premises shows Application Error (CVE-2022-43890)

Summary IBM Security Verify Privilege On-Premises has remediated several vulnerabilities in which internal product details were being disclosed that could be exploited for harmful attacks. Vulnerability Details CVEID:CVE-2022-43890 DESCRIPTION: IBM Security Verify Privilege On-Premises could...

Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance

Summary Multiple security vulnerabilities related to jQuery, Bootstrap, and other components have been addressed in IBM Security Verify Governance. Vulnerability Details CVEID:CVE-2021-41184 DESCRIPTION: jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of...

CVE-2023-31001

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...

CVE-2023-31003

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...

CVE-2023-38267

IBM Security Access Manager Appliance IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 260584...

CVE-2023-31001 IBM Security Access Manager Container information disclosure

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...