(RHSA-2023:1428) Important: Migration Toolkit for Containers (MTC) 1.7.8 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the M ...

Continue Reading

CVSS3 - CRITICAL

Security Bulletin: IBM API Connect is impacted by an improper access control vulnerability (CVE-2023-28522)

## Summary IBM API Connect has addressed the following improper access control vulnerability CVE-2023-285220. ## Vulnerability Details ** CVEID: **[CVE-2023-28522]() ** DESCRIPTION: **IBM API Connect ...

Continue Reading
Oracle Linux 8 : openssl (ELSA-2023-1405)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1405 advisory. - A timing based side channel exists in the OpenSSL ...

Continue Reading

CVSS3 - HIGH

CVE-2023-20903 – Tokens for inactivated IDPs are not revoked and remain valid until expiration | Cloud Foundry

# ## Severity CVSS score: 2.7 (Low) ## Vendor Cloud Foundry Foundation ## Versions Affected All versions ## Description This disclosure regards a vulnerability related to UAA refresh tokens and exter ...

Continue Reading
CVE-2023-28434

Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket w ...

Continue Reading
Start from zero and scale to zero – Azure Spring Apps consumption plan

We are launching a new way to pay for Azure Spring Apps -- the consumption pricing plan. This plan is now in public preview so you can start creating and deploying apps today. This new plan is super-e ...

Continue Reading
Cisco DNA Center Information Disclosure Vulnerability

A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The ...

Continue Reading
Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device ...

Continue Reading

Back to Main

Subscribe for the latest news: