Multiple issues in Cloud Foundry Products

buy Clomiphene at walgreens Overview :

UAA logs all query parameters with debug logging level

Akwatia Affected Product(s) :

CF Deployment
- All versions prior to v12.12.0
UAA Release
- All versions prior to v74.10.0

Vulnerability Details :

CVE ID :	CVE-2019-11293
	Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query param. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authentication is provided via query parameters.

Remediation / Fixes :

Users of affected products are strongly encouraged to follow the mitigations below. The Cloud Foundry project recommends upgrading the following releases:

CF Deployment
- Upgrade All versions to v12.12.0 or greater
UAA Release
- Upgrade All versions to v74.10.0 or greater

Contact us to get started

CVE-2024-45252 : ELSIGHT HALO PRIOR 11.9.4.0 OS COMMAND INJECTION

Description Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) References https://www.gov.il/en/Departments/faq/cve_advisories For

Learn more

CVE-2024-47350 : YITH WOOCOMMERCE AJAX SEARCH PLUGIN UP TO 2.8.0 ON WORDPRESS SQL INJECTION

Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in YITH YITH WooCommerce Ajax Search

Learn more

CVE-2024-9560 : ESAFENET CDG V5 CATELOGS;LOGINDOJOJS DELCATELOGS ID SQL INJECTION

Description A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is

Learn more