303 matches found
What’s New in InsightIDR: Q3 2020 in Review
In July, we provided a rundown of what was new in InsightIDR, our cloud-based SIEM tool, from the first half of 2020 check out the blog post here for a recap. We’ve released some pretty great features and updates since then, so we thought it was time for another recap! This post offers a closer...
CVE-2020-4528
IBM MQ Appliance IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12 could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658...
Define What to Parse From Logs with the Custom Parsing Tool in InsightIDR
Data is essential to any SIEM. Generally, this data is collected from logs, endpoints, and networks. All of this data paints a holistic picture of your network so you have constant visibility into what’s going on, and where. When it comes to security data, log data is the primary driver. In...
Privilege escalation
Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...
CVE-2020-3447
A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco AsyncOS for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to excessive...
Sophos Central and Home Privilege Vulnerability
Sophos Central and Sophos Home are both products of Sophos UK.Sophos Central is a unified console program for managing Sophos products.Sophos Home is a suite of network security protection software. The product supports threat detection, virus checking and ransomware protection. A privilege-lifti...
Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-32805)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to obtain hotspot passwords in logs...
Deserialization of Untrusted Data in Log4j
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions 1.2 up ...
CVE-2019-14913
An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...
Cross site scripting
An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...
CVE-2019-14913
An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...
Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-30067)
Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. An information disclosure vulnerability exists in several work log rest resources in Jira. The vulnerability stems from a lack of privilege checking. A remote attacker could exploi...
CVE-2019-14396
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
CVE-2019-14396
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
Code injection
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
CVE-2019-14396
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
CVE-2019-11273
Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...
CVE-2019-13098
The CVE describes a password disclosure in TronLink Wallet 2.2.0 where the user password is logged during CreateWalletTwoActivity, allowing other authenticated apps/users with access to the device log (Logcat) to read it. The issue is tied to logging sensitive data and, on Android versions before...
IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2019-20991)
IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit the vulnerability to obtain highly sensitive...