Re: SFCB vulnerabilities

[Nicolas Grégoire <nicolas.gregoire () agarri fr>]

> Unfortunally they seem to re-introduce these bugs in other sblims
> like sblim-gather. Did you look at that too?

No, I only audited different CIM brokers for remote pre-auth bugs.

By the way, these audits showed that vendors add many patches to the
upstream code, sometimes removing vulnerabilities (like VMware in this
case) and sometimes adding ones ;-)

Regards,
Nicolas Grégoire / Agarri