GaussDB Kernel: Configuring the Minimum Audit Log File Retention Period

The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

GaussDB Kernel: Configuring the Interconnection with Elastic Search

Unified audit sends audit logs to the third-party Elastic Search system for log analysis and processing. You are advised to configure the interconnection with Elastic Search. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

GaussDB Kernel: Configuring Rsyslog for Unified Audit Logs

By default, unified audit logs are output to the Rsyslog on each CN. User root is authorized to configure and view the logs. Ensure that enablesecuritypolicy is Enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

GaussDB Kernel: Checking the POLADMIN Permission

A role with the POLADMIN permission can create resource labels, anonymization policies, and unified audit policies. To avoid arbitrary security policy creation, delete roles that do not require the POLADMIN permission. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

GaussDB Kernel: Configure an Audit Priority Policy

Configures the policy for determining whether audit logs are preferentially stored by space or time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Food-Supply Giant Americold Admits Cyberattack

Americold, a company whose cold-storage capabilities are integral to the U.S. food-supply chain and soon, COVID-19 vaccine distribution, has confirmed an operations-impacting cyberattack, according to a filing with the Securities and Exchange Commission SEC. The filing was brief and read in part:...

CVE-2020-13359

The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are =12.10, =13.4, =13.5, 13.5.2...

CVE-2020-13359

The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are =12.10, =13.4, =13.5, 13.5.2...

Code injection

The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are =12.10, =13.4, =13.5, 13.5.2...

CVE-2020-13359

The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are =12.10, =13.4, =13.5, 13.5.2...

CVE-2020-13359

Removed by vendor...

PT-2020-13500 · Gitlab +1 · Gitlab Ce/Ee +2

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.10 through 13.3.8 GitLab CE/EE versions 13.4 through 13.4.4 GitLab CE/EE versions 13.5 through 13.5.1 Description: The Terraform API in GitLab CE/EE exposed the object storage signed URL on the delete operation,...

JetBrains TeamCity Unauthorized Access Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An unauthorized vulnerability exists in JetBrains...

CVE-2020-27628

In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records...

CVE-2020-27628

In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records...

Design/Logic Flaw

In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records...

CVE-2020-27628

Affected product: JetBrains TeamCity before 2020.1.5. Vulnerability: Guest users could access audit records, exposing audit data. The technical root cause is not detailed in the provided documents. Impact: Unauthenticated/guest visibility of audit information may affect confidentiality as describ...

CVE-2020-27628

In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An unauthorized vulnerability exists in JetBrains...

openGauss: Configuring the Maximum Number of Audit Log Files

The parameter auditfileremainthreshold specifies the maximum number of audit log files. When the total number of audit log files exceeds the specified value, the system writes the warning information to the database logs, deletes the earliest audit log files, and records the deletion to the audit...