EUVD-2017-5751

Malware in sbrugna...

RHEL 7 : sensu (RHSA-2018:1112)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1112 advisory. Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security Fixes: Sensu's redaction function fails to handle the...

RHEL 7 : sensu (RHSA-2018:1606)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1606 advisory. Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security fixes: Sensu's redaction function fails to handle the...

RHEL 7 : sensu (RHSA-2018:0616)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0616 advisory. Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security Fixes: sensu: Password exposure in warn level log when...

Moderate: Red Hat Security Advisory: sensu security update

An update for sensu is now available for Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2018-1000060

CVE-2018-1000060 affects Sensu Core prior to 1.2.0 (and before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b). The root cause is Sensu::Utilities.redact_sensitive() failing to redact sensitive data in deeply nested structures, causing passwords and other credentials to be logged in clear-text i...

Sql injection

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

CVE-2017-14247

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

CVE-2017-1000060

EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...

CVE-2017-1000060

EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...

CVE-2017-1000060

EyesOfNetwork (EON) 5.1 has an unauthenticated SQL Injection in the web interface (eonweb) that leads to remote root. The vulnerability is described across multiple connected records as existing in EyesOfNetwork 5.1-0 and is related to CVE-2017-1000060. The root cause is an SQL injection vulnerab...