An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdeskintegration/saml/user/createorupdate endpoint, the /settings/guest-settings endpoint, the /settings/samlusers-settings endpoint, and the /settings/users-settings endpoint. A malicious user (already logged in as a SAML User) is able to achieve privilege escalation from a low-privilege user (FGM user) to an administrative user (GGU user), including the administrator, or create new users…
An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdesk_{DOMAIN]/export endpoint. A malicious user, authenticated to the product without any specific privilege, can use the API for exporting information about all users of the system (an operation intended to only be available to the system administrator).
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user.
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the application into concluding that the TOTP was correct.
Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass.This issue affects Access Management: from 6.5.0 through 7.2.0.
Когда Джефф Безос решил основать Amazon (изначально книжный интернет-магазин), он открыто оценивал вероятность провала в 70%. Сейчас Amazon среди самых известных транснациональных корпораций в мире. Одна из ключевых её особенностей — поощрение изобретений и инноваций среди…
Автор делится своим опытом установки Kubernetes на AWS Cloud и с использованием Ubuntu 20.04. Он столкнулся с некоторыми ошибками в процессе установки, и смог найти решения для них. Читать далее
Ремешок силиконовый GSMIN Blow Light 22 для Amazfit Stratos 3 (Белый) Ремешок силиконовый GSMIN Blow Light 22 для Amazfit Stratos 3 (Белый) Материал силикон Цвет белый в наличиивозможна доставка. Цена: 428.00 ₽ КУПИТЬ
— Длительный срок службы- Устойчив к любой окружающей среде — Удобен для ношения 24 часа в сутки — Гипоаллергенный материал — Цвет не выгорает Ремешок силиконовый GSMIN Elate 20 для Haylou LS02 (Черный) Материал силикон Цвет черный в наличиивозможна доставка. Цена: 499.00 ₽ КУПИТЬ