‼ CVE-2021-31601 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all databases connection details and credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42073 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component (aka the server-side implementation of Barrier) simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could instead be guessed from hostnames or other publicly available information. In the active session state, an attacker can capture input device events from the server, and also modify the clipboard content on the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31602 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml file. The default configuration allows an unauthenticated user with no previous knowledge of the platform settings to extract pieces of information without possessing valid credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42371 ‼
📖 Read
via "National Vulnerability Database".
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31599 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex reports. An authenticated user can run arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34684 ‼
📖 Read
via "National Vulnerability Database".
Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data source and thus retrieve data from the related databases, as demonstrated by an api/repos/dashboards/editor URI.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34685 ‼
📖 Read
via "National Vulnerability Database".
UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and leads to remote code execution).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42077 ‼
📖 Read
via "National Vulnerability Database".
PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter. This can be used to execute SQL statements directly on the database, allowing an adversary in some cases to completely compromise the database system. It can also be used to bypass the login form.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42372 ‼
📖 Read
via "National Vulnerability Database".
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42078 ‼
📖 Read
via "National Vulnerability Database".
PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/events_manager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the site.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31600 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42074 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side implementation of Barrier) by quickly opening and closing TCP connections while sending a Hello message for each TCP session.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42072 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks that could lead to information leaks or integrity corruption.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42075 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leading to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42076 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barrier) and barrierc by sending long TCP messages.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42370 ‼
📖 Read
via "National Vulnerability Database".
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)📖 Read
via "National Vulnerability Database".
🕴 3 Ways to Deal With the Trojan Source Attack 🕴
📖 Read
via "Dark Reading".
These scripts and commands can be used to block the Trojan Source attack.📖 Read
via "Dark Reading".
Dark Reading
3 Ways to Deal With the Trojan Source Attack
These scripts and commands provide short-term fixes for blocking the Trojan Source attack that abuses Unicode to inject malicious backdoors int source code.
🗓️ Interpol issues arrest warrants for members of Clop ransomware gang 🗓️
📖 Read
via "The Daily Swig".
Wanted: cybercriminals behind global malware campaign📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Interpol issues arrest warrants for members of Clop ransomware gang
Wanted: cybercriminals behind global malware campaign
🗓️ Campaigning lawyers launch counter-offensive against software patent trolls 🗓️
📖 Read
via "The Daily Swig".
Stemming the tide of ‘stupid software patents and the trolls they feed’📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Campaigning lawyers launch counter-offensive against software patent trolls
Stemming the tide of ‘stupid software patents and the trolls they feed’
🕴 Could Cyber Diplomacy Be the Ultimate Answer to American Ransomware Woes? 🕴
📖 Read
via "Dark Reading".
Incentives for good conduct and deterrents for bad behavior in cyberspace are impossible to effectively establish and enforce without international collaboration and commitment.📖 Read
via "Dark Reading".
Dark Reading
Could Cyber Diplomacy Be the Ultimate Answer to American Ransomware Woes?
Incentives for good conduct and deterrents for bad behavior in cyberspace are impossible to effectively establish and enforce without international collaboration and commitment.
‼ CVE-2021-32482 ‼
📖 Read
via "National Vulnerability Database".
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.📖 Read
via "National Vulnerability Database".