Design/Logic Flaw

A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

Design/Logic Flaw

Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2019-10463

Jenkins Dynatrace Application Monitoring Plugin is affected by CVE-2019-10463. A missing permission check allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. The vulnerability affects plugin versions prior to 2.1.5. Remediati...

CVE-2019-10462

CVE-2019-10462 describes a cross-site request forgery in the Jenkins Dynatrace Application Monitoring Plugin (versions 2.1.3 and earlier). The vulnerability allows an attacker to cause the plugin to connect to an attacker‑supplied URL using attacker‑supplied credentials. NVD CVSS scores indicate ...

CVE-2019-10462

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2019-10461: Insufficiently Protected Credentials

Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

CVE-2019-10462: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2019-10463: Incorrect Default Permissions

A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

Description of Update Rollup 2 for System Center 2012 R2 Operations Manager

Description of Update Rollup 2 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Operations Manager and the Linux and Unix Monitoring Pack. Additionally, this article contains the...

Manage Engine Application Manager 12.5 - Arbitrary Command Execution

!C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications Manager is an application performance monitoring solution that...

ManageEngine Application Manager XSS / CSRF / Privilege Escalation

Manage Engine Applications Manager 12 Multiple Vulnerabilities Vendor Product Description - ManageEngine Applications Manager is an application performance monitoring solution that proactively monitors business applications and help businesses ensure their revenue-critical applications meet end...

HP / Micro Focus SiteScope Detection (HTTP)

HTTP based detection of HP / Micro Focus SiteScope Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GroundWork - 'monarch_scan.cgi' OS Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

GroundWork monarch_scan.cgi OS Command Injection Vulnerability

This Metasploit module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi, where user controlled input is used in the perl qx function, which allows any remote authenticated...

GroundWork monarch_scan.cgi OS Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

GroundWork monarch_scan.cgi OS Command Injection

This module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi where user controlled input is used in the perl qx function. This allows any remote authenticated attacker, regardle...

ManageEngine Application Manager 10 - Multiple Vulnerabilities

Title: ====== ME Application Manager 10 - Multiple Web Vulnerabilities Date: ===== 2012-07-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=627 VL-ID: ===== 627 Common Vulnerability Scoring System: ==================================== 7.2 Introduction: =============...

ME Monitoring Manager Cross Site Scripting / SQL Injection

Title: ====== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities Date: ===== 2012-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=115 VL-ID: ===== 115 Introduction: ============= Mit dem ManageEngine Applications Manager können IT-Administratoren von...

ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities

Document Title: =============== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=115 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020039 ID: CNNVD-201202-039 Release Date: =============...