CVE-2019-6689

An issue was discovered in Dillon Kane Tidal Workload Automation Agent 3.2.0.5 formerly known as Cisco Workload Automation or CWA. The Enterprise Scheduler for AIX allows local users to gain privileges via Command Injection in crafted Tidal Job Buffers TJB parameters. NOTE: this vulnerability...

CVE-2019-6689

CVE-2019-6689 affects Dillon Kane Tidal Workload Automation Agent 3.2.0.5 (Enterprise Scheduler for AIX). Local users can escalate privileges via Command Injection in crafted Tidal Job Buffers (TJB) parameters. The note cites that the CVE-2014-3272 fix did not cover AIX. Public remediation or exp...

PT-2019-18271

Name of the Vulnerable Software and Affected Versions Dillon Kane Tidal Workload Automation Agent version 3.2.0.5 Description An issue was discovered that allows local users to gain privileges via Command Injection in crafted Tidal Job Buffers TJB parameters. This issue exists because a previous...

CVE-2019-6689: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Dillon Kane Tidal Workload Automation Agent 3.2.0.5 formerly known as Cisco Workload Automation or CWA. The Enterprise Scheduler for AIX allows local users to gain privileges via Command Injection in crafted Tidal Job Buffers TJB parameters. NOTE: this vulnerability...

How to pin Citrix Hypervisor Virtual CPUs to specific Physical CPUs

Citrix Hypervisor maps vCPUs to pCPUs by default in a semi-even way to distribute VM load on the host. In some cases it may be needed to have a specific mapping, for example, if some VMs will be CPU intensive while other wont, the intensive VMs can be mapped to exclusive physical CPUs while the...

CVE-2019-6504

Insufficient output sanitization in the Automic Web Interface AWI, in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting XSS attacks via a crafted object...

CVE-2019-6504

Insufficient output sanitization in the Automic Web Interface AWI, in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting XSS attacks via a crafted object...

CVE-2019-6504

The CVE-2019-6504 refers to a Cross-Site Scripting (XSS) vulnerability in the Automic Web Interface (AWI) of CA Automic Workload Automation (formerly UC4), due to insufficient output sanitization. Affected are CA Automic Workload Automation versions 12.0 through 12.2, with the issue enabling pers...

PT-2019-18124

Name of the Vulnerable Software and Affected Versions CA Automic Workload Automation versions 12.0 through 12.2 Description The issue is related to insufficient output sanitization in the Automic Web Interface AWI, which could allow attackers to conduct persistent cross-site scripting XSS attacks...

CVE-2019-6504: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in the Automic Web Interface AWI, in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting XSS attacks via a crafted object...

CA AWI 12.0 / 12.1 / 12.2 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Cross-site scripting product: CA Automic Workload Automation Web Interface AWI formerly Automic Automation Engine, UC4 vulnerable version: 12.0, 12.1, 12.2 fixed version:...

Cryptomining Malware Uninstalls Cloud Security Products

Researchers say they have discovered a unique malware family capable of gaining admin rights on targeted systems by uninstalling cloud-security products. Instances of the malicious activity are tied to coin-mining malware targeting Linux servers. Palo Alto Networks’ Unit 42, which published the...

Server Security for the Modern IT Ecosystem

A Changing Landscape In recent years we’ve seen a fundamental shift in the IT landscape, accelerated towards cloud and containerized infrastructures. According to Forbes, by 2020 it is predicted that 83 percent of enterprise workloads will be in the cloud. Moving beyond the cloud, software...

Security Bulletin: CVE-2018-1719 vulnerability in IBM WebSphere application server may potentially affect IBM Workload Scheduler.

Summary CVE-2018-1719 vulnerability in IBM WebSphere application server may potentially affect IBM Workload Scheduler. Vulnerability Details CVEID: CVE-2018-1719 DESCRIPTION: IBM WebSphere Application Server could provide weaker than expected security under certain conditions. This could result i...

Security Bulletin: There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, Version 7, Version 8, that is used by IBM Workload Scheduler. These issues were disclosed as part of the IBM Java SDK updates in July 2018.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, Version 7, Version 8, that is used by IBM Workload Scheduler. These issues were disclosed as part of the IBM Java SDK updates in July 2018. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The IBM...

Akamai Identified As A Strong Performer Among Zero Trust eXtended Ecosystem Providers By Independent Research Firm

We are pleased to share that today Akamai has been cited as a Strong Performer in The Forrester Wave™: Zero Trust eXtended Ecosystem Providers, Q4 2018 evaluation. In the report, Forrester evaluated how each vendor's portfolio maps and delivers on specific components of the ZTX framework. Akamai...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2018 - Includes Oracle Apr 2018 CPU affects IBM Workload Scheduler

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, Version 7 ,version 8, that is used by IBM Workload Scheduler. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2783 DESCRIPTION: An...

The Gartner CISO Playbook: Leveraging Effective Control in the Cloud

For as long as we can remember, the concept of control has rested comfortably in physical location and ownership. It’s simple, if you could see something or you knew exactly where it was, it would be easier to assume that you’d have some measure of control over its security. With the move to the...

Security Bulletin: A security vulnerability has been identified in IBM Workload Deployer shipped with SmartCloud Orchestrator (CVE-2014-6158)

Summary IBM Workload Deployer is shipped as a component of IBM SmartCloud Orchestrator. Information about a security vulnerability affecting IBM Workload Deployer has been published in a security bulletin. Vulnerability Details Review security bulletin Security Bulletin: File path traversal...

Security Bulletin: File path traversal vulnerabilities affect IBM Workload Deployer shipped with IBM SmartCloud Orchestrator (CVE-2014-6158)

Summary File path traversal vulnerabilities affect IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator CVE-2014-6158. Vulnerability Details Consult the Security Bulletin: File path traversal vulnerabilities affect IBM Workload Deployer CVE-2014-6158 document for vulnerability...