Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7856PUBLISHED: 2021-04-20A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation.
CVE-2021-28793PUBLISHED: 2021-04-20vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration.
CVE-2021-25679PUBLISHED: 2021-04-20
** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed....
CVE-2021-25680PUBLISHED: 2021-04-20
** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...
CVE-2021-25681PUBLISHED: 2021-04-20
** UNSUPPORTED WHEN ASSIGNED ** AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The aff...
0 Comments
Tweet This
User Rank: Ninja
5/16/2017 | 12:22:07 PM
1. A corporation should not worry about mockers and should stay motivated in being more secure no matter what. To me it is a duty for the sake of the company if not for that of its customers and employees. We may avoid mocking the security team after a breach or an employee after a successful phishing attempt, but a corporation has liabilities and responsibilities and frankly i do not care about its feelings.
2. ROI can be estimated for security as for anything else. It all starts with agreeing on a set of data and tracking it accordingly. The roi can be on number of incidents reduction, cost of a breach (the lower the better) as we know that it can vary based on how sensitive was the data stolen, etc...
More importantly i think IT security teams should learn how to translate what they do in business terms and rally business users that way. The divide between IT and business -which is the premise of this article- has no reason to be. Business users also have to do their share and start considering IT security as a true competitive advantage for any corporations today.