Skip to content
OpenAdvisories

Archive

9 April 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 2.5

    Information Disclosure in GlobalProtect Agent

    GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session toke…

  • Low 3.8

    Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security

    Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance. In order to be impacted, an honest ap…

  • Low 3.1

    Rapid7 InsightVM Stored Credential Exposure

    Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring backups, as well as the salt for those passwords. Valid credentials are required to…