FlyteAdmin’s Default OAuth Authorization Server secret must be rotated

### Impact Users who enable the default [Flyte’s authorization server](https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server) without changing the def ...

Continue Reading
[SECURITY] Fedora 37 Update: python-oauthlib-3.2.1-1.fc37

OAuthLib is a generic utility which implements the logic of OAuth without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library ...

Continue Reading

CVSS3 - MEDIUM

A week in security (September 26 – October 2)

Last week on Malwarebytes Labs: * [Why (almost) everything we told you about passwords was wrong]() * [Two new Exchange Server zero-days in the wild]() * [Local government cybersecurity: 5 best ...

Continue Reading
Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code

### Impact Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability. An attacker can exploit this vulnerability b ...

Continue Reading
Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code

### Impact Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability. An attacker can exploit this vulnerability b ...

Continue Reading
Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI

## Summary Fix is available for vulnerabilities in React, webpack and Node.js modules affecting Tivoli Netcool/OMNIbus WebGUI. The modules are used by Tivoli Netcool/OMNIbus WebGUI as part of its web ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

ARC Informatique PcVue (Update A)

Skip to main content Toolbar items Manage Administration menu Tools Extend Tools Content Extend Content Structure Configuration Extend Configuration Help Horizontal orientation dgloria Edit ICS Adviso ...

Continue Reading

CVSS3 - MEDIUM

Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7

## Abstract Cross reference list for security vulnerabilities fixed in IBM WebSphere Application Server Fix Pack 8.0.0.7 ## Content **VULNERABILITY DETAILS: ** ** ** **CVE ID:**** **[**CVE****-2013-29 ...

Continue Reading

CVSS2 - HIGH

Back to Main

Subscribe for the latest news: