PT-2022-37486

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue concerns a redirectable log file in /tmp in mariadb.in. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

SUSE-SU-2022:2326-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Predictable log file in /tmp in mariadb.in bsc1146691. - Allow aws-vpc-move-ip to specify an interface label to distinguish the IP address bsc1199766 - Implement options to disable DAD and to allow sending NA in the background bsc11961...

SUSE-SU-2022:2325-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed predictable log file in /tmp in mariadb.in bsc1146691. - Allow aws-vpc-move-ip to specify an interface label to distinguish the IP address bsc1199766 - Implement options to disable DAD and to allow sending NA in the background...

PT-2022-37485

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue involves a predictable log file in /tmp in mariadb.in. Additionally, there are updates to allow aws-vpc-move-ip to specify an interface label and to implement options for...

PT-2022-37484

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue involves a predictable log file in /tmp in mariadb.in. Additionally, there are improvements and fixes for other components, including the ability to specify an interface lab...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

Default credentials

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

Summary: CVE-2022-33737 affects OpenVPN Access Server installers. The issue arises because the installer creates a log file that is readable by everyone, and in OpenVPN Access Server versions 2.10.0 through 2.10.x (up to but not including 2.11.0) this log may contain a randomly generated administ...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

OpenVPN log information leakage vulnerability

OpenVPN is a software package from US-based OpenVPN Inc. for creating encrypted tunnels for virtual private networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using public keys, electronic certificates, or...

CVE-2022-33737: Incorrect Ownership Assignment

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

GO-2022-0438 Exposure of sensitive information via log file in github.com/hashicorp/go-getter

The getter package can write SSH credentials to its logfile, exposing credentials to local users able to read the logfile...

PT-2022-6220 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 through 9.1.0.19 Dell PowerScale OneFS version 9.2.1.12 Dell PowerScale OneFS version 9.3.0.6 Description: The issue is related to the disclosure of sensitive information through log files in the PowerScal...

CVE-2022-1843

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks...

CVE-2022-31098: Insertion of Sensitive Information into Log File

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of...

SCP-server Log Access

The vulnerability of the SCP-server software for managing the SAN Brocade SANnav network is related to the storage of protected information in unencrypted form. Exploiting this vulnerability could allow an attacker to gain access to log files...

CVE-2022-20651: Insertion of Sensitive Information into Log File

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

Apache Sling security vulnerabilities

Apache Sling is an open source Web framework for the Java platform from the Apache Foundation. Designed to create content-centric applications on JSR-170-compliant content repositories such as Apache Jackrabbit, a log injection vulnerability exists in Apache Sling Commons Log version 5.4.0 and...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...