6615 matches found
CVE-2024-38862 SNMP and IMPI secrets written to audit log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p18, 2.2.0p35, 2.1.0p48 and =2.0.0p39 EOL causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators...
CVE-2024-38862
The CVE-2024-38862 vulnerability affects Checkmk GmbH’s Checkmk, where versions before 2.3.0p18, 2.2.0p35, 2.1.0p48 and the EOL 2.0.0p39 store SNMP and IMPI secrets of host and folder properties in audit log files that are accessible to administrators. The issue is caused by insertion of sensitiv...
CVE-2024-38862 SNMP and IMPI secrets written to audit log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p18, 2.2.0p35, 2.1.0p48 and =2.0.0p39 EOL causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators...
CVE-2024-38862 SNMP and IMPI secrets written to audit log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p18, 2.2.0p35, 2.1.0p48 and =2.0.0p39 EOL causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators...
PT-2024-28243 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p18 Checkmk versions 2.2.0p35 Checkmk versions 2.1.0p48 Checkmk versions =2.0.0p39 EOL Description: The issue concerns the insertion of sensitive information into log files in Checkmk, causing SNMP and IMPI secrets of ho...
Checkmk 安全漏洞
Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk that stems from the insertion of sensitive information into log files, which could result in SNMP and IMPI secrets for host and folder attributes being written to administrator-accessible audit log...
Decidim has a cross-site scripting vulnerability in the version control page
Impact The version control feature used in resources is subject to potential cross-site scripting XSS attack through a malformed URL. Workarounds Not available References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized by Open Source Politics against Decidi...
Decidim has a cross-site scripting vulnerability in the version control page
Impact The version control feature used in resources is subject to potential cross-site scripting XSS attack through a malformed URL. Workarounds Not available References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized by Open Source Politics against Decidi...
Protecting your privacy: Opera has completed an independent no-log audit of its free browser VPN
Privacy Protecting your privacy: Opera has completed an independent no-log audit of its free browser VPN Share September 25th, 2024 Hi Opera users! We are excited to announce that we have successfully completed an independent audit of our no-log policy for Opera’s free browser VPN available on...
cargo-audit-0.20.0~git66.972ac93-3.1 on GA media (moderate)
cargo-audit-0.20.0git66.972ac93-3.1 on GA media Announcement ID: openSUSE-SU-2024:14363-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
The vulnerability of HashiCorp’s Vault and Vault Enterprise file archiving platforms lies in the fact that inserting confidential information into the log file allows a perpetrator to access this confidential information.
The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms lies in the fact that open text values for client tokens and token accessories are stored in an audit log. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
OPENSUSE-SU-2024:14363-1 cargo-audit-0.20.0~git66.972ac93-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.20.0git66.972ac93-3.1 package on the GA media of openSUSE Tumbleweed...
D-Link DAR-7000 Operating System Command Injection Vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAR-7000 20240912 and earlier versions, which stems from the parameter host in the file /view/DBManage/BackupServercommit.php that can lead to OS command...
ROS-20240918-13
A vulnerability in HashiCorp's Vault and Vault Enterprise enterprise information archiving platforms is related to storing the plaintext values of client tokens and token accessors in the audit log auditing. Exploitation of the vulnerability could allow an attacker to gain access to sensitive...
Successful user login events using PAT does not update last login date and are not added to the audit logs
h3. Issue Summary When users authenticate on Confluence, this information should be update last login date as well as add as new events on the audit log when full coverage is enabled for the Security category. Requests made with personal access tokens PAT for REST API won't create a new entry on...
CVE-2024-8059
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...
CVE-2024-45105
An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2024-45105
An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2024-45105
An internal product security audit discovered a UEFI SMM System Management Mode callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code...