Security Bulletin: WebSphere Application Server Liberty is vulnerable to Cross-site Scripting that affects Liberty for Java for IBM Cloud (CVE-2020-4303, CVE-2020-4304)

## Summary There is a cross-site scripting vulnerability in the OAuth, OpenID Connect and SAML features. This has been addressed. ## Vulnerability Details ** CVEID: **[CVE-2020-4303]() ** DESCRIPTION: ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Security Bulletin: Liberty for Java for IBM Cloud is vulnerable to a denial of service (CVE-2020-4590)

## Summary There is a denial of service vulnerablility in IBM WebSphere Application Server Liberty used in Liberty for Java for IBM Cloud. ## Vulnerability Details ** CVEID: **[CVE-2020-4590]() ** DES ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Exploit for Injection in Forgerock Openam

# CVE-2021-29156 done right This Proof of Concept is realized b...Read More ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

FlyteAdmin’s Default OAuth Authorization Server secret must be rotated

### Impact Users who enable the default [Flyte’s authorization server](https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server) without changing the def ...

Continue Reading
CVE-2022-39222

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
FlyteAdmin’s Default OAuth Authorization Server secret must be rotated

### Impact Users who enable the default [Flyte’s authorization server](https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server) without changing the def ...

Continue Reading
[SECURITY] Fedora 37 Update: python-oauthlib-3.2.1-1.fc37

OAuthLib is a generic utility which implements the logic of OAuth without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library ...

Continue Reading

CVSS3 - MEDIUM

A week in security (September 26 – October 2)

Last week on Malwarebytes Labs: * [Why (almost) everything we told you about passwords was wrong]() * [Two new Exchange Server zero-days in the wild]() * [Local government cybersecurity: 5 best ...

Continue Reading

Back to Main

Subscribe for the latest news: