Computer Security
[EN] securityvulns.ru no-pyccku


CA eHealth crossite scripting
Published:12.05.2011
Source:
SecurityVulns ID:11666
Type:remote
Threat Level:
5/10
Affected:CA : eHealth 6.0
 CA : eHealth 6.1
 CA : eHealth 6.2
CVE:CVE-2011-1899 (Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.)
Original documentdocumentCA, CA20110510-01: Security Notice for CA eHealth (12.05.2011)

HP Network Node Manager i weak permissions
Published:12.05.2011
Source:
SecurityVulns ID:11667
Type:local
Threat Level:
5/10
Description:Weak permissions for log and data files.
CVE:CVE-2011-1855 (Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows local users to read or modify (1) log files or (2) other data via unknown vectors.)
Original documentdocumentHP, [security bulletin] HPSBMA02672 SSRT100485 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Local Read and Write Access to Data and Log Files (12.05.2011)

Oracle GlassFish Server authentication bypass
updated since 12.05.2011
Published:09.01.2012
Source:
SecurityVulns ID:11668
Type:remote
Threat Level:
5/10
Description:Unauthenticated administration console access via HTTP TRACE requests.
CVE:CVE-2011-1511 (Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.)
Original documentdocument[email protected], NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability (09.01.2012)
 documentCORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass (12.05.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod