2738 matches found
CVE-2018-1002104
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
CVE-2018-1002104
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
Default credentials
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
CVE-2018-1002104
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
CVE-2018-1002104
CVE-2018-1002104 affects Kubernetes ingress default backend versions = 1.5) is implied but not confirmed in these sources.
CVE-2018-1002104
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
PT-2020-8511
Name of the Vulnerable Software and Affected Versions: Kubernetes ingress default backend versions prior to 1.5 Description: The issue concerns the exposure of Prometheus metrics publicly due to the Kubernetes ingress default backend handling invalid ingress traffic improperly. Recommendations: F...
PT-2020-1486
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to the Metrics Framework component and is caused by inadequate access control. It allows a high-privileged attacker with network...
CVE-2018-1002104: Insertion of Sensitive Information Into Debugging Code
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
7 Tips for Maximizing Your SOC
It takes a special sort of person to be a security analyst. The person must be detail-oriented, curious, intelligent and hard-working, and with a quick reaction time as constant attacks unfold. These analysts have deep expertise that they use during their long shifts to sort through what’s worth...
How We Streamlined Infrastructure and Tooling as a Service for Development
At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...
Our Communication Strategy to Help Development Make the Switch to Kubernetes
VMware Carbon Black has acquired a lot of technology as it has grown. That means we have a lot of different tooling in play that is both costly and complex to manage. Our VP of Engineering recognized this and created a new team specifically tasked with creating a unified system infrastructure and...
GitLab Information Disclosure Vulnerability (CNVD-2020-20438)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...
FreeBSD : Gitlab -- Multiple Vulnerabilities (4ce7c28a-11ac-11ea-b537-001b217b3468)
Gitlab reports : Unauthorized access to grafana metrics Update Mattermost dependency C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use...
FreeBSD : Gitlab -- Multiple Vulnerabilities (1aa7a094-1147-11ea-b537-001b217b3468)
Gitlab reports : Path traversal with potential remote code execution Private objects exposed through project import Disclosure of notes via Elasticsearch integration Disclosure of comments via Elasticsearch integration DNS Rebind SSRF in various chat notifications Disclosure of vulnerability stat...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Unauthorized access to grafana metrics Update Mattermost dependency...
Jenkins Build-Metrics 1.3 Cross Site Scripting
Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting Date: 2019-11-06 Exploit Author: vesche Austin Jackson Vendor Homepage: https://plugins.jenkins.io/build-metrics Version: Jenkins build-metrics plugin 1.3 and below Tested on: Debian 10 Buster, Jenkins 2.203 latest...
Jenkins build-metrics plugin 1.3 - (label) Cross-Site Scripting Vulnerability
Exploit for java platform in category web applications Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting Exploit Author: vesche Austin Jackson Vendor Homepage: https://plugins.jenkins.io/build-metrics Version: Jenkins build-metrics plugin 1.3 and below Tested on: Debi...
Jenkins build-metrics plugin 1.3 - label Cross-Site Scripting
Jenkins build-metrics plugin 1.3 - label Cross-Site Scripting Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting Date: 2019-11-06 Exploit Author: vesche Austin Jackson Vendor Homepage: https://plugins.jenkins.io/build-metrics Version: Jenkins build-metrics plugin 1.3 a...
Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting
Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting Date: 2019-11-06 Exploit Author: vesche Austin Jackson Vendor Homepage: https://plugins.jenkins.io/build-metrics Version: Jenkins build-metrics plugin 1.3 and below Tested on: Debian 10 Buster, Jenkins 2.203 latest...