Preface: There are two primary types of buffer overflow vulnerabilities: Stack overflow and Heap overflow. Product background: The administrative command–line client is a program that runs on a file server, workstation, or mainframe. It is installed as part of the Tivoli Storage Manager server installation process. The administrative client can be accessed remotely. From the…

Preface: Most SD-WAN suppliers have partnerships with leading cloud platforms, and they use a variety of methods to accelerate traffic coming to and from cloud platforms. But IT pros say, it should look for better security. Background: The Orchestrator provides you with a JSON-RPC API, which means you call it over HTTPS. It’s not a…

Preface: The interconnect component of the opensource application is the opensource software. Background: Salt (sometimes referred to as SaltStack) is Python-based, open-source software for event-driven IT automation, remote task execution, and configuration management. Vulnerability details: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH…

NATS Srv wiki – Cloud native messaging system made for developers and operators who want to spend more time doing their work and lesstime worrying about how to do messaging. End user of this product: Mastercard, Baidu, Alibaba Group, VMware, GE, Pivotal, Telia Company, netlify, htc, GE, Zephyr Project, tinder and ERICSSON Vulnerability details: Some…

Preface: CMDB is a repository that should contain only business critical items that you want to track. It should contain a record of information that allows you to answer business critical questions and helps you to connect business processes. CMDB should contain all the items that are important for your business or a service. About…

Preface: Our daily life is relies on Cloud computing system. Smart City, GPRS, mapping & spatial analytics technology their backend system are located on cloud. Apart of cloud system operation and architecture. The inter network empower its life. Background: In our digital world , networks packet processing functions are dynamically injected into the network. Each…

Preface: Have you heard a terms, so called take Ownership of his Registry key? Background: CapaSystems helps businesses achieve greater efficiency through Device Management and Monitoring by using CapaInstaller and PerformanceGuard. The purpose for the CapaInstaller Agent Health Check is to maintain a healthy and up to date agent on every computer/server. Vulnerability details: A…

Preface: This vulnerability disclosed one year ago. Perhaps the details of defect you require to know. Background: Shibboleth is a web-based Single Sign-On infrastructure. It is based on SAML. Shibboleth does not carry out authentication itself. SAML (Security Assertion Mark-up Language) is an umbrella standard that covers federation, identity management and single sign-on (SSO). Vulnerability…