Lucene search
+L

262 matches found

Prion
Prion
•added 2022/03/10 5:44 p.m.•26 views

Code injection

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...

2.1CVSS5.4AI score0.00362EPSS
SaveExploits2References2Affected Software1
AlpineLinux
AlpineLinux
•added 2022/03/10 5:44 p.m.•159 views

CVE-2021-44216

Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files...

5.5CVSS4AI score0.00362EPSS
SaveExploits2
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•23 views

Northern.tech CFEngine 安全漏洞

Northern.tech CFEngine is an IT infrastructure configuration management and automation framework. A security vulnerability exists in Northern.tech CFEngine Enterprise versions prior to 3.15.4 3.15.5 that allows unauthorized local users to have an unspecified impact...

5.5CVSS5.8AI score0.00362EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•22 views

Northern.tech CFEngine 安全漏洞

Northern.tech CFEngine is an IT infrastructure configuration management and automation framework. A security vulnerability exists in Northern.tech CFEngine Enterprise versions prior to 3.15.5 that allows unauthorized local users to access Apache and Mission Portal log files...

5.5CVSS5.7AI score0.00362EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2022/03/07 2:43 p.m.•56 views

CVE-2021-44215

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...

5.7AI score0.00354EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/07 2:43 p.m.•123 views

CVE-2021-44215

CVE-2021-44215 and CVE-2021-44216 affect Northern.tech CFEngine Enterprise. CVE-2021-44215: CFEngine Enterprise 3.15.4 before 3.15.5 has insecure file permissions that may allow unauthorized local users to have an unspecified impact. CVE-2021-44216: CFEngine Enterprise versions before 3.15.5 and ...

5.5CVSS5.3AI score0.00354EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/03/07 2:43 p.m.•131 views

CVE-2021-44216

CVE-2021-44216 affects Northern.tech CFEngine Enterprise: before 3.15.5 and, for 3.18.x, before 3.18.1, there are insecure permissions that may allow unauthorized local users to access the Apache and Mission Portal log files. Upgrading to CFEngine Enterprise 3.15.5 or 3.18.1 (or newer) is the doc...

5.5CVSS5.3AI score0.00362EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2022/03/07 2:43 p.m.•56 views

CVE-2021-44216

Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files...

5.6AI score0.00362EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/07 12:00 a.m.•8 views

CVE-2021-44215: Incorrect Default Permissions

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...

5.5CVSS6AI score0.00354EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/07 12:00 a.m.•8 views

CVE-2021-44216: Incorrect Default Permissions

Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files...

5.5CVSS6AI score0.00362EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•27 views

PT-2022-12019

Name of the Vulnerable Software and Affected Versions Northern.tech CFEngine Enterprise versions prior to 3.15.5 Northern.tech CFEngine Enterprise versions 3.18.x prior to 3.18.1 Description The issue is related to insecure permissions, which may allow unauthorized local users to access log files...

5.5CVSS5.3AI score0.00362EPSS
SaveExploits2References11
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•4 views

PT-2022-12018

Name of the Vulnerable Software and Affected Versions CFEngine Enterprise version 3.15.4 Description The issue is related to Insecure Permissions, which may allow unauthorized local users to have an unspecified impact. Recommendations For version 3.15.4, update to version 3.15.5 to resolve the...

5.5CVSS0.00354EPSS
SaveExploits1References12
osv_cve
osv_cve
•added 2021/10/27 3:15 p.m.•36 views

CVE-2021-38379

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

5.5CVSS6.4AI score
SaveExploits0References2
NVD
NVD
•added 2021/10/27 3:15 p.m.•35 views

CVE-2021-38379

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

5.5CVSS0.00214EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/10/27 3:15 p.m.•34 views

CVE-2021-36756

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...

6.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
•added 2021/10/27 3:15 p.m.•29 views

CVE-2021-36756

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...

6.5CVSS0.00417EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/10/27 3:15 p.m.•11 views

CVE-2021-38379

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

6.5CVSS6.4AI score0.00417EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2021/10/27 3:15 p.m.•101 views

CVE-2021-38379

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

5.5CVSS5.8AI score0.00214EPSS
SaveExploits0
Prion
Prion
•added 2021/10/27 3:15 p.m.•21 views

Input validation

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...

6.4CVSS6.5AI score0.00417EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/27 3:15 p.m.•11 views

CVE-2021-36756

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...

6.5CVSS6.4AI score0.00417EPSS
SaveExploits0References3
Rows per page
Query Builder