ibm Archives - CVE Vulnerability

CVE-2008-7284

Sun, 26 Feb 2023 09:11:57 +0000

IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QCAO7E6AM8.

The post CVE-2008-7284 appeared first on CVE Vulnerability.

CVE-2008-7285

Sun, 26 Feb 2023 09:11:57 +0000

Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, aka SPR JFLD7GZT25.

The post CVE-2008-7285 appeared first on CVE Vulnerability.

CVE-2008-7286

Sun, 26 Feb 2023 09:11:57 +0000

IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service (daemon crash) via a request to resources.nsf, aka SPR XFXF7JDBCX.

The post CVE-2008-7286 appeared first on CVE Vulnerability.

CVE-2008-7287

Sun, 26 Feb 2023 09:11:57 +0000

Multiple memory leaks in the (1) ldap_init and (2) ldap_url_search_direct API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service (memory consumption) by making many function calls.

The post CVE-2008-7287 appeared first on CVE Vulnerability.

CVE-2008-7288

Sun, 26 Feb 2023 09:11:57 +0000

IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation.

The post CVE-2008-7288 appeared first on CVE Vulnerability.

CVE-2008-7299

Sun, 26 Feb 2023 09:11:57 +0000

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field.

The post CVE-2008-7299 appeared first on CVE Vulnerability.

CVE-2008-7253

Sun, 26 Feb 2023 09:11:56 +0000

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

The post CVE-2008-7253 appeared first on CVE Vulnerability.

CVE-2008-7261

Sun, 26 Feb 2023 09:11:56 +0000

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.

The post CVE-2008-7261 appeared first on CVE Vulnerability.

CVE-2008-6973

Sun, 26 Feb 2023 09:11:48 +0000

Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vectors.

The post CVE-2008-6973 appeared first on CVE Vulnerability.

CVE-2018-9068

Sun, 26 Feb 2023 06:51:43 +0000

The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected. This information is made available for download through an SFTP server hosted on the IMM2 management network interface. In versions earlier than 4.90 for Lenovo System x and earlier than 6.80 for IBM System x, the credentials to access the SFTP server are hard-coded and described in the IMM2 documentation, allowing an attacker with management network access to obtain the collected FFDC data. After applying the update, the IMM2 will create random SFTP credentials for use with OneCLI.

The post CVE-2018-9068 appeared first on CVE Vulnerability.