Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-22152PUBLISHED: 2021-05-13A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.
CVE-2021-22153PUBLISHED: 2021-05-13
A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with t...
CVE-2021-22154PUBLISHED: 2021-05-13An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.
CVE-2021-20331PUBLISHED: 2021-05-13
Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "i...
CVE-2021-31215PUBLISHED: 2021-05-13SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.
0 Comments
Tweet This
User Rank: Ninja
4/16/2018 | 4:42:49 PM
I doubt if that can happen unless it's orchestrated, from the top, by each organization's Information System architects. The raison d' etre for IS is informing knowledge workers. That entails not only supplying information, but regulating it's dissemination. It is only at the IS level (through the application of business rules, instantiated at the transactional data level), that policies can be enforced - otherwise, they are just suggestions.