-
Authorization bypass in Cortex XSOAR (palo alto networks) REST API – CVE-2021-3044
Preface: REST API has similar vulnerabilities as a web application. The possibilities will be from various threats, such as Man-in-the-Middle attacks, lack of XML encryptions, insecure endpoints, API URL parameters, ..etc. Technical background: Cortex XSOAR is the Security Orchestration, Automation and Response (SOAR) solution from Palo AltoNetworks. Cortex XSOAR (formerly Demisto) is able to configuration…
-
CVE-2021-32994 – OPC UA C++ SDK is vulnerable to a denial of service 17th June, 2021
-
Digital world situation similar ambush from all sides. Chrome Releases updates (CVE-2021-30554) – 17th June 2021.
Preface: The new Edge and Chrome are very similar, as both are built on the same Chromium platform. Meanwhile, Microsoft Edge is based on the Chromium open-source project. Furthermore, when chrome has vulnerability occurs, perhaps Microsoft browser (edge) will be get involves. Background: WebGL enables web content to use an API based on OpenGL ES…
-
Reduce e-waste and achieve environmental protection: outdated iphone models – Security updates (14-06-2021)
Preface: To protect the safety of customers, Apple will not disclose, discuss or confirm security issues until the investigation is completed and patches or updated versions are provided. My observations on CVE-2021-30737: Background: PKINIT is a preauthentication mechanism for Kerberos 5 which uses X.509 certificates to authenticate the KDC to clients and vice versa.PKINIT requires…
-
Another alert in the medical industry (ZOLL Defibrillator Dashboard design weakness) 15th Jun 2021
Preface: A defibrillator is a device that gives a high energy electric shock to the heart of someone who is in cardiac arrest. What is Defibrillator Dashboard ? A Web-based application provides ability to login. The Dashboard contained monitoring the defibrillators function. Vulnerability details: The U.S. Department of Homeland Security urges the medical industry to…
-
Closer to reality: one of the ways of ransomware infection (15th June, 2021)
Preface: Ransomware infection not merely boots by vulnerability of the windows OS and or products components. Web site programming technique is the accomplice. Perhaps we can say, how successful of ransomware attacks will depends on the total number of compromised web server. What I call the trigger point. Background: Ransomware is often spread through phishing…
-
Rising Ransomware Threat To Operational Technology Assets, US (CISA) urge to critical facilities to tighten their cyber security incident management and protection. 10-6-2021
Preface: When the TCP/IP network protocol replaces the classic MODBUS protocol on a large scale. At the same time, there is a large demand for the deployment of Windows operating system servers and workstations. From the perspective of cyber security, information technology and operational technology are the same. Synopsis: On May (9th May 2021), 2017,…
-
Security Focus : CVE-2021-27610 – Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform (8th Jun, 2021)
Preface: The proof of concept for this vulnerability has been announced. As usual, vendors use their patch release cycle. Therefore, an announcement was issued today (June 8, 2021). Background: SAP NetWeaver is a software stack for many of SAP SE’s applications. It can be used for custom development and integration with other applications and systems,…
-
CVE-2021-20292 – Flaw found in Nouveau DRM subsystem (8th June 2021)
Preface: Nouveau is a free and open source graphics card driver. It is written for Nvidia’s graphics card and can also be used in the NVIDIA Tegra series of system chips. This driver is written by a group of independent software engineers. Nvidia sometimes will be assistance. Background: What is DRM subsystem? The Direct Rendering…
-
CVE-2021-28091 – Lasso incorrect assertion validation and verification – Published: 01 June 2021
Preface: This vulnerability affects other vendors’ use of this product for their single sign-on function. Background: Lasso is a free software C library aiming to implement the Liberty Alliance standards; it defines processes for federated identities, single sign-on and related protocols.Lasso is built on top of libxml2, XMLSec and OpenSSL and is licensed under the…