Jenkins Open API Verification

Confirms unauthenticated Jenkins whoAmI/api and script console indicators. !/usr/bin/env python3 -- coding: utf-8 -- """Verify exposed Jenkins API and script console surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation...

EUVD-2018-12107

Malware in sbrugna...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API (CVE-2018-1528)

Summary IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API. Vulnerability Details CVEID: CVE-2018-1528 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API. CVS...

Design/Logic Flaw

IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290...

CVE-2018-1528

IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290...

CVE-2018-1528

IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290...

PT-2018-12952

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.6 through 7.6.3 Description The issue allows an authenticated user to obtain sensitive information from the "WhoAmI API" endpoint. Recommendations For versions 7.6 through 7.6.3, consider restricting acce...

CVE-2018-1528: Exposure of Sensitive Information to an Unauthorized Actor

IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290...