EUVD-2015-2000

Malware in sbrugna...

EUVD-2014-0857

Malware in sbrugna...

Security Bulletin: Multiple vulnerabilities in IBM InfoSphere Optim Workload Replay (CVE-2015-1894, CVE-2015-1895)

Summary Multiple vulnerabilities have been identified in IBM® InfoSphere® Optim™ Workload Replay, allowing an attacker to obtain information or gain access to data and operations that are restricted to authorized users. Vulnerability Details CVEID: CVE-2015-1894 DESCRIPTION: IBM Optim Workload...

Security Bulletin: IBM InfoSphere Optim Workload Replay Cross Site Scripting Vulnerability (CVE-2014-0827)

Summary An attacker can trick a user into inserting a mal-formed URL address into a browser or clicking on a mal-formed URL link and exploit a cross-site scripting vulnerability to gain unauthorized access or collect sensitive information. Vulnerability Details CVE ID:CVE-2014-0827 CVSS: CVSS Bas...

CVE-2015-1895

IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...

CVE-2015-1894

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Authorization

IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...

CVE-2015-1895

IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...

CVE-2015-1894: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-1895: Undefined Security Weakness

IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...

CVE-2015-1894

CVE-2015-1894 affects IBM InfoSphere Optim Workload Replay. The IBM advisory identifies a cross-site request forgery due to improper validation of user input that could let an attacker hijack an authenticated user’s session to perform actions, potentially enabling cross-site scripting through cra...

PT-2015-5492

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions prior to 2.1.0.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recommendations For...

PT-2015-5493

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions 2.x before 2.1.0.3 Description The issue allows remote attackers to bypass intended access restrictions by modifying client behavior, as the software relies on client-side code to verify...

IBM Optim Workload Replay Security Bypass Vulnerability

IBM InfoSphere Optim Workload Replay is an IBM solution for replaying real database production activities and providing reports on the impact of changes and identifying problems quickly. A security vulnerability exists in IBM Optim Workload Replay. The vulnerability allows an attacker to bypass...

IBM InfoSphere Optim Workload Replay Cross-Site Request Forgery Vulnerability

IBM InfoSphere Optim Workload Replay is an IBM solution for replaying real database production activities and providing reports on the impact of changes and identifying problems quickly. A cross-site request forgery vulnerability exists in IBM InfoSphere Optim Workload Replay that allows remote...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3871

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay version 1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the affected...

CVE-2014-0827: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...