Month: octubre 2018

Apache Tomcat vulnerability CVE-2018-11784. Security Advisory. Security Advisory Description. When the default servlet ... More info: https://support.f5.com/csp/article/K64921482

El grupo International Airline Group (IAG), matriz de Birtish Airways (BA), informó hoy de que los datos de 185.000 personas se vieron comprometidos en un ciberataque producido entre abril y julio de este año.

En un comunicado remitido hoy a la Bolsa de Valores de Londres, la entidad señaló que los perjudicados son clientes de BA que solicitaron recompensas por reservas realizas entre el 21 de abril y el 28 de julio de 2018.

Del total de 185.000 afectados, 77.000 vieron comprometidos su información de pago con tarjeta, incluyendo el número de la misma, la fecha de caducidad y el código CVV, mientras que otras 108.000 sufrieron la vulneración en sus datos personales y financieros pero no el código CVV.

Más información LA VANGUARDIA

Reflected XSS vulnerability in an undisclosed Configuration utility page CVE-2018-15315. Security Advisory. Security Advisory Description. ... More info: https://support.f5.com/csp/article/K41704442

Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impact ofCritical. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-12389, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12395, CVE-2018-12396, CVE-2018-12397 More info: http://rhn.redhat.com/errata/RHSA-2018-3005.html

Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impact ofCritical. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-12389, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12395, CVE-2018-12396, CVE-2018-12397 More info: http://rhn.redhat.com/errata/RHSA-2018-3006.html

Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impact ofCritical. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-12389, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12395, CVE-2018-12396, CVE-2018-12397 More info: http://rhn.redhat.com/errata/RHSA-2018-3006.html

Red Hat Enterprise Linux: An update for chromium-browser is now available for Red Hat Enterprise Linux 6Supplementary.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-16435, CVE-2018-17462, CVE-2018-17463, CVE-2018-17464, CVE-2018-17465, CVE-2018-17466, CVE-2018-17467, More info: http://rhn.redhat.com/errata/RHSA-2018-3004.html

Red Hat Enterprise Linux: An update for chromium-browser is now available for Red Hat Enterprise Linux 6Supplementary.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-16435, CVE-2018-17462, CVE-2018-17463, CVE-2018-17464, CVE-2018-17465, CVE-2018-17466, CVE-2018-17467, More info: http://rhn.redhat.com/errata/RHSA-2018-3004.html

As announced in August, Firefox is changing its approach to addressing tracking on the web. As part of that plan, we signaled our intent to prevent cross-site tracking for all Firefox users and made our initial prototype available for testing. … Continue readingThe post Firefox 63 Lets Users Block Tracking Cookies appeared first on Mozilla Security Blog. More info: https://blog.mozilla.org/security/2018/10/23/firefox-63-lets-users-block-tracking-cookies/

IPsec IKEv1 vulnerability CVE-2018-5389. Security Advisory. Security Advisory Description. The Internet Key Exchange v1 ... More info: https://support.f5.com/csp/article/K42378447