Cobbler 代码问题漏洞

Cobbler is a network installation server suite, which is mainly used to quickly set up Linux network installation environment.Cobbler in versions prior to 3.3.0 there is an arbitrary file writing vulnerability, the vulnerability originates from the system does not do effective filtering of user...

PT-2021-22860

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 3.3.0 Description The issue allows arbitrary file write operations via upload log data. Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue...

Logging: A Deep Dive

Our RASP product At Imperva our team builds a product called RASP which stands for Runtime Application Self Protection. As indicated by the name, it is a security product which plugs directly into the runtime of an application in order to provide a similar and complementary set of capabilities as...

Introducing the Manual Regex Editor in IDR’s Parsing Tool: Part 1

New to writing regular expressions? No problem. In this two-part blog series, we’ll cover the basics of regular expressions and how to write regular expression statements regex to extract fields from your logs while using the custom parsing tool. Like learning any new language, getting started ca...

Grok Buffer Overflow Vulnerability

Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A security vulnerability exists in Grok versions 7.6.6 through 9.2.0 that stems from a heap-based buffer overflow in the...

CVE-2021-31546

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data...

CVE-2021-31546

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data...

PT-2021-19416 · Mediawiki +1 · Abusefilter +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 Description: An issue in the AbuseFilter extension for MediaWiki incorrectly logged sensitive suppression deletions. These deletions should not have been visible to users with access to view AbuseFilter log...

InsightIDR’s Log Search: Recent Enhancements and Upcoming Investments

Log data is critical to ensuring that you have full visibility into what’s going on across your environment. Alongside endpoint and network data, log data enables teams to detect malicious activity, prove compliance, and have better visibility across their environment. Within InsightIDR, our Log...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

Monitor Google Cloud Platform (GCP) Data With InsightIDR

InsightIDR was built in the cloud to support dynamic and rapidly changing environments—including remote workers, hybrid cloud and on-premises architectures, and fully cloud environments. Today, more and more organizations are adopting multi-cloud or hybrid environments, creating increasingly more...

CVE-2020-7541

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:12+00:00| seen| https://t.me/cibsecurity/19776 2020-12-11 07:38:14+00:00| seen| https://t.me/cibsecurity/19796 2020-12-11 08:25:28+00:00| seen| https://t.me/cibsecurity/19816 2020-12-11 09:25:23+00:00| seen| https://t.me/cibsecurity/198...

IBM Business Automation Workflow 日志信息泄露漏洞

IBM Business Automation Workflow is a platform for creating workflow applications to improve productivity. An information disclosure vulnerability exists in IBM Business Automation Workflow 19.0.0.3. A local attacker can exploit the vulnerability to read potentially sensitive information stored i...

Vulnerability fixed in JBoss Wildfly

A vulnerability has been fixed in Wildfly. The vulnerability allows a malicious person with access to the log data of the Wildfly instance to be able to obtain clear-text stored passwords. obtain. Red Hat has released updates to fix the vulnerability in Wildfly. More information can be found on t...

CVE-2020-4566

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083...

What’s New in InsightIDR: Q3 2020 in Review

In July, we provided a rundown of what was new in InsightIDR, our cloud-based SIEM tool, from the first half of 2020 check out the blog post here for a recap. We’ve released some pretty great features and updates since then, so we thought it was time for another recap! This post offers a closer...

CVE-2020-4528

IBM MQ Appliance IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12 could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658...

Define What to Parse From Logs with the Custom Parsing Tool in InsightIDR

Data is essential to any SIEM. Generally, this data is collected from logs, endpoints, and networks. All of this data paints a holistic picture of your network so you have constant visibility into what’s going on, and where. When it comes to security data, log data is the primary driver. In...

Privilege escalation

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...

PT-2020-19532

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description A privilege escalation issue exists due to improper access controls in the user interface, allowing an authenticated user interface user to delete or download protected log data...