Security Bulletin: Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator (CVE-2014-6190)

Summary Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator CVE-2014-6190. Vulnerability Details For vulnerability details, see the IBM Workload Deployer Security Bulletin. Affected Products and Versions IBM SmartCloud Orchestrator 2.2 and 2.2...

Security Bulletin: IBM Tivoli Application Dependency Discovery Manager (TADDM) can reveal TADDM database sensitive information (CVE-2014-6148)

Summary IBM Tivoli Application Dependency Discovery Manager contains a vulnerability that would allow an attacker to steal sensitive information to access TADDM database. Vulnerability Details CVE ID: CVE-2014-6148 DESCRIPTION: An attacker can use a specially-crafted URL to steal sensitive TADDM...

Security Bulletin: Vulnerabilities in BIRT-viewer embedded in IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2014-6149)

Summary There are vulnerabilities in BIRT-viewer embedded in TADDM that cannot be fixed, so there is a need to disable BIRT-viewer in TADDM. For secure use of BIRT reports in TADDM there is a need to use Tivoli Common Reporting TCR where TADDM BIRT reports can be migrated. Vulnerability Details C...

Security Bulletin: TADDM – Security improvement: BIRT-Report Viewer application vulnerable to directory traversal attack.

Summary TADDM security improvement deployed started from TADDM 7.2.1.5 and in TADDM 7.2.2 avoids vulnerability in embedded TADDM BIRT-Report Viewer application. Vulnerability Details CVE-2013-3004 Description Embedded in TADDM BIRT-Report Viewer application component was found to be vulnerable to...

Security Bulletin: TADDM - BIRT viewer allow bypass authorization

Summary TADDM fails to properly check for authorization when allowing a user to view BIRT reports. It is possible to bypass authorization in the application via parameters manipulation in the BIRT reporting URL. Vulnerability Details CVE-2013-2974 BIRT viewer allow bypass authorization Descriptio...

Security Bulletin: IBM Forms Viewer may be affected by an Apache Xerces-C XML Parser library vulnerability (CVE-2016-0729, CVE-2016-4463)

Summary An IBM Form XFDL document that contains a specially crafted mark-up could crash IBM Forms Viewer. This may expose a vulnerability in its use of the Apache Xerces-C XML Parser library. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable ...

Security Bulletin: IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system (CVE-2016-2542)

Summary IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system. If you have recently downloaded a copy of IBM Forms Viewer, use the information below to correct the vulnerability prior to installing the product. If you have already installed IBM...

Security Bulletin: IBM Forms Viewer may be affected by a known issue with libpng library (CVE-2015-8126, CVE-2015-8472)

Summary An IBM Form XFDL document that contains a specially crafted PNG image can crash IBM Forms Viewer. This can occur based on the Viewer's use of this library. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking...

Security Bulletin: IBM Forms Viewer can crash on some embedded PNG images (CVE-2013-6954)

Summary A XFDL form with a PNG image that exposes this issue can crash the IBM Forms Viewer Vulnerability Details CVEID: CVE-2013-6954 DESCRIPTION: A XFDL form can be created utilizing a specially created PNG image that could result in the IBM Forms Viewer to crash. CVSS Base Score: 4.3 CVSS...

Security Bulletin: Multiple vulnerabilities in IBM SDK for Java included with IBM Forms Viewer

Summary Multiple security vulnerabilities exist in the IBM SDK for Java that is included with several installations of the IBM Forms Viewer. Vulnerability Details The IBM Forms Viewer includes installers that bundle and use the IBM SDK for Java. This version of Java includes multiple...

Security Bulletin: Log viewer vulnerability affects IBM PureApplication System (CVE-2014-6190)

Summary Log viewer vulnerability affects IBM PureApplication System. Vulnerability Details CVEID: CVE-2014-6190 DESCRIPTION: Defined system users without proper permissions can access the log viewer functionality by entering the log page URLs in their browser. CVSS Base Score: 5.0 CVSS Temporal...

Security Bulletin: Log viewer vulnerability affects IBM Workload Deployer (CVE-2014-6190)

Summary Log viewer vulnerability affects IBM Workload Deployer. Vulnerability Details CVEID:CVE-2014-6190 DESCRIPTION: Defined system users without proper permissions can access the log viewer functionality by entering the log page URLs in their browser. CVSS Base Score: 5.0 CVSS Temporal Score:...

CVE-2018-11689

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha...

CVE-2018-11689

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha...

Design/Logic Flaw

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha...

CVE-2018-11689

CVE-2018-11689 describes a cross-site scripting (XSS) vulnerability in the Web Viewer codebase used by Hanwha/DVR and Samsung Smart Viewer. The flaw is triggered via the data3 parameter in /cgi-bin/webviewer_login_page, affecting Hanwha DVR 2.17 and Samsung Web Viewer. CVSS metrics indicate netwo...

CVE-2018-11689

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha...

CVE-2018-8246

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel...

CVE-2018-8246

CVE-2018-8246 affects Microsoft Excel and related Office components. The connected advisories describe an information-disclosure vulnerability caused by the inclusion of uninitialized memory when processing parsed expressions in FORMULA records within Excel workbooks, allowing disclosure of sensi...

Common Resolutions to “Cannot Complete Your Request” when connecting directly to StoreFront Server

Symptoms or Error The “Cannot Complete Your Request” error is displayed through connecting directly to StoreFront server. However, this is an error could occur when connecting through Citrix Gateway or Load Balancer based on different deployment scenarios. To narrow down through which connection...