251 matches found
CVE-2021-22048
The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group...
CVE-2021-22048
The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group...
VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)
3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...
PT-2021-4966
Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions affected versions not specified VMware Cloud Foundation versions affected versions not specified Description The issue is related to a privilege escalation vulnerability in the IWA Integrated Windows Authenticati...
July 13, 2021—KB5004299 (Security-only update)
None None...
July 13, 2021—KB5004307 (Security-only update)
None None...
July 13, 2021 Public preview security update (KB5004243)
None None...
June 8, 2021 Public preview security update (KB5003645)
None None...
The vulnerability of the PKU2U authentication protocol for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the PKU2U authentication protocol for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
October 13, 2020—KB4580327 (OS Build 10240.18725) - EXPIRED
None None...
PT-2020-14630 · Siemens · Siveillance Video Client
Name of the Vulnerable Software and Affected Versions: Siveillance Video Client All versions Description: A vulnerability has been identified where the client application transmits usernames to the server in cleartext when Windows NTLM authentication is enabled. This could allow an attacker in a...
June 9, 2020—KB4561649 (OS Build 10240.18608)
None None...
June 9, 2020—KB4561621 (OS Build 17134.1550)
None None...
March 10, 2020—KB4538461 (OS Build 17763.1098)
None None...
March 10, 2020—KB4541504 (Security-only update)
None None...
March 10, 2020—KB4541510 (Monthly Rollup)
None None...
CVE-2020-0618
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka ‘Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability’. Recent assessments: wvu-r7 at February 18, 2020 6:51pm UTC reported: Although the...
CVE-2019-17336
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...