CISO Resigns From Pete Buttigieg Presidential Campaign

Enterprise Vulnerabilities
From DHS/US-CERT’s National Vulnerability Database CVE-2019-3683
PUBLISHED: 2020-01-17

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and…

CVE-2019-3682
PUBLISHED: 2020-01-17

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

CVE-2019-17361
PUBLISHED: 2020-01-17

In SaltStack Salt through 2019.2.0, the salt-api NEST API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.

CVE-2019-19142
PUBLISHED: 2020-01-17

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.

CVE-2019-19801
PUBLISHED: 2020-01-17

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.

Thanks to the Courtesy of :

https://www.darkreading.com/careers-and-people/ciso-resigns-from-pete-buttigieg-presidential-campaign/d/d-id/1336821?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Leave a Reply