Lucene search
+L

292 matches found

NVD
NVD
added 2021/04/09 5:15 p.m.23 views

CVE-2021-29671

IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478...

4CVSS0.00231EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/09 5:15 p.m.14 views

Design/Logic Flaw

IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478...

1.9CVSS3.8AI score0.00231EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/09 4:45 p.m.47 views

CVE-2021-29671

CVE-2021-29671 affects IBM Spectrum Scale 5.1.0.1, where a local attacker could bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM’s bulletin confirms the affected product and provides a fix: upgrade to IBM Spectrum Scale 5.1.0.2 or later (FixCentral). No exploi...

4CVSS3.8AI score0.00231EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/09 4:45 p.m.20 views

CVE-2021-29671

IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478...

4CVSS3.9AI score0.00231EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/09 12:0 a.m.4 views

IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A file system audit logging bypass vulnerability exists in IBM Spectrum Scale version 5.1.0.1. A local attacker could exploit this vulnerability to...

4CVSS5.6AI score0.00231EPSS
SaveExploits0References4
Veracode
Veracode
added 2021/02/15 4:34 a.m.21 views

Information Disclosure

x-pack-security is vulnerable to information disclosure. The Elasticsearch audit log can contain confidential information such as password hashes or authentication tokens when audit logging and the emitrequestbody option is enabled...

4.9CVSS1.2AI score0.01313EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/02/15 12:0 a.m.21 views

Elastic Elasticsearch Information Disclosure Vulnerability (ESA-2021-03)

Elasticsearch is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.9CVSS5AI score0.01313EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2021/02/10 9:41 p.m.28 views

CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4.9CVSS5.7AI score0.01313EPSS
SaveExploits0References3
NVD
NVD
added 2021/02/10 7:15 p.m.15 views

CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4.9CVSS0.01313EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/10 7:15 p.m.25 views

CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4.9CVSS6.5AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/02/10 7:15 p.m.28 views

CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4.9CVSS6.6AI score0.01313EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/10 7:15 p.m.22 views

Information disclosure

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4CVSS5.3AI score0.01313EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/02/10 7:15 p.m.4 views

UBUNTU-CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...

4.9CVSS6.7AI score0.01313EPSS
SaveExploits0References3
CVE
CVE
added 2021/02/10 6:55 p.m.141 views

CVE-2020-7021

CVE-2020-7021 affects Elasticsearch versions before 7.10.0 and 6.8.14. When audit logging and the emit_request_body option are enabled, the Elasticsearch audit log could disclose sensitive information such as password hashes or authentication tokens. This is described in the CVE entry and echoed ...

4.9CVSS5.2AI score0.01313EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/02/10 12:0 a.m.5 views

PT-2021-12634 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.10.0 Elasticsearch versions prior to 6.8.14 Description: The issue is related to an information disclosure problem when audit logging and the emit request body option are enabled. This could lead to the...

4.9CVSS5.3AI score0.01313EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2021/01/13 9:16 p.m.28 views

CVE-2021-1226 Cisco Unified Communications Products Information Disclosure Vulnerability

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager...

4.3CVSS6.5AI score0.00908EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/13 9:16 p.m.12 views

CVE-2021-1226 Cisco Unified Communications Products Information Disclosure Vulnerability

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager...

4.3CVSS6.5AI score0.00908EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/13 9:16 p.m.77 views

CVE-2021-1226

The CVE-2021-1226 issue affects Cisco UCM family (including Cisco Unified Communications Manager, Session Management Edition, IM&P Service, Unity Connection, Emergency Responder, and Prime License Manager). It arises from storing certain credentials in clear text within audit logs, enabling an au...

6.5CVSS5.2AI score0.00908EPSS
SaveExploits0References1Affected Software5
Cisco
Cisco
added 2021/01/13 4:0 p.m.64 views

Cisco Unified Communications Products Information Disclosure Vulnerability

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager...

4.3CVSS5.3AI score0.00908EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/03 6:15 p.m.18 views

CVE-2020-3281

A vulnerability in the audit logging component of Cisco Digital Network Architecture DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this...

8.8CVSS5.5AI score0.01047EPSS
SaveExploits0References1
Rows per page
Query Builder