Lucene search
+L

5325 matches found

osv_ubuntu
osv_ubuntu
•added 2023/01/14 2:15 a.m.•25 views

UBUNTU-CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS7.1AI score0.0068EPSS
SaveExploits1References5
Prion
Prion
•added 2023/01/14 2:15 a.m.•22 views

Design/Logic Flaw

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.4CVSS9.1AI score0.0068EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/01/14 2:15 a.m.•62 views

CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS7AI score0.0068EPSS
SaveExploits1References4
NVD
NVD
•added 2023/01/14 1:15 a.m.•46 views

CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

9.8CVSS9.6AI score0.36171EPSS
SaveExploits2References1
osv_debian
osv_debian
•added 2023/01/14 1:15 a.m.•15 views

DEBIAN-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

9.8CVSS8.6AI score0.36171EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2023/01/14 1:15 a.m.•305 views

CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

9.8CVSS7.2AI score0.36171EPSS
SaveExploits2References2
Prion
Prion
•added 2023/01/14 1:15 a.m.•28 views

Design/Logic Flaw

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

7.5CVSS10AI score0.36171EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2023/01/14 1:02 a.m.•52 views

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.5CVSS9.4AI score0.0068EPSS
SaveExploits1References2
CVE
CVE
•added 2023/01/14 1:02 a.m.•133 views

CVE-2023-22497

Netdata CVE-2023-22497 concerns a streaming configuration flaw where a valid MACHINE_GUID could be used as an API key in stream.conf, allowing non-trusted users to access parent/child Netdata Agents. Affects Netdata agents that expose streaming functionality; attacker could leverage this to acces...

9.1CVSS7.7AI score0.0068EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2023/01/14 1:02 a.m.•102 views

CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS7.6AI score0.0068EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2023/01/14 1:02 a.m.•14 views

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.5CVSS8AI score0.0068EPSS
SaveExploits1References2
Mend
Mend
•added 2023/01/14 1:02 a.m.•7 views

CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS0.0068EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2023/01/14 1:02 a.m.•38 views

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.5CVSS7.6AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2023/01/14 1:02 a.m.•95 views

CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS8.9AI score0.0068EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/14 12:59 a.m.•37 views

CVE-2023-22496 Netdata vulnerable to command injection

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

8.1CVSS10AI score0.36171EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2023/01/14 12:59 a.m.•36 views

CVE-2023-22496 Netdata vulnerable to command injection

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

8.1CVSS9.2AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2023/01/14 12:59 a.m.•101 views

CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

9.8CVSS9.8AI score0.36171EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2023/01/14 12:00 a.m.•15 views

PT-2023-18547

Name of the Vulnerable Software and Affected Versions Netdata agent versions prior to 1.37 stable and 1.36.0-409 nightly Description An issue exists where an attacker can execute arbitrary commands on a targeted Netdata agent by establishing a streaming connection and providing a specially crafte...

9.8CVSS8.8AI score0.36171EPSS
SaveExploits2References16
Positive Technologies
Positive Technologies
•added 2023/01/14 12:00 a.m.•18 views

PT-2023-18548 · Netdata +4 · Netdata +4

Name of the Vulnerable Software and Affected Versions: Netdata agent versions prior to 1.37 Netdata agent versions prior to 1.36.0-409 nightly Description: The issue affects Netdata Agents that expose their services to non-trusted users, particularly when the streaming feature is enabled, allowin...

9.8CVSS7AI score0.36171EPSS
SaveExploits10References35
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/14 12:00 a.m.•3 views

CVE-2023-22497: Improper Authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS5.8AI score0.0068EPSS
SaveExploits1References3
Rows per page
Query Builder