Vulnerability of the Server component: The Audit Log of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The Audit Log of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to cause service interruptions using specially crafted network packets...

Vulnerability of the Security component: The MySQL database management system audit mechanism allows attackers to modify data or cause service failures.

Vulnerability of the Security component: Audits of MySQL database management systems are related to deficiencies in access control. Exploitation of this vulnerability can allow a malicious actor to modify data or cause service failures by using specially crafted network packets...

The vulnerability of the Server:Audit Plug-in component of the MySQL database management system allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Server:Audit Plug-in component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted network...

GaussDB: Enable PL Audit

If the audit level is set to 8, the parsing and execution of stored procedures are audited, for example, EXECUTE EXEC and CALL. In addition, the definitions of anonymous blocks in stored procedures are audited. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...

GaussDB: Enable DDL Audit

If AUDITLEVEL is set to 1, only Data Definition Language DDL operations such as CREATE, DROP, and ALTER are audited. DDL is used to define or modify database objects, such as tables, indexes, views, synonyms, databases, sequences, users, roles, tablespaces, profiles, and sessions. In addition,...

GaussDB: Enable DML Audit

If AUDITLEVEL is set to 4, Data Manipulation Language DML operations, such as INSERT, UPDATE, DELETE, and SELECT are audited. DML is used to manage table data. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ZSQL: Audit Level

Audit logs are important in tracing data, locating faults, and clarifying responsibilities after security events occur. Database audit is configured by setting the AUDITLEVEL parameter. AUDITLEVEL = 0 disables audit logs. If AUDITLEVEL is set to a value greater than 0, audit logs are enabled, and...

ZSQL: Maximum Number of Backup Audit Files

The AUDITBACKUPFILECOUNT parameter specifies the maximum number of backup audit log files. If the number of backup files exceeds the specified value, the earliest backup files are automatically deleted and the backup deletion information is recorded in audit logs. SPDX-FileCopyrightText: 2020...

ZSQL: Maximum Capacity of an Audit Log File

The parameter AUDITMAXFILESIZE specifies the maximum capacity of an audit log file. The default unit is byte and the default value is 10M. If the size of an audit log file reaches the specified value, another audit log file is automatically created. SPDX-FileCopyrightText: 2020 Greenbone AG Some...

ZSQL: Audit File Path

The LOGHOME parameter specifies the storage path of the audit file. By default, the audit file is stored in the $GSDBDATA/log/audit directory. Note: The script compares the LOGHOME in DVPARAMETERS with the $GSDBDATA/log environmental variable. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...

Cumulative Update 41 for Microsoft Dynamics NAV 2017 (Build 30219)

Cumulative Update 41 for Microsoft Dynamics NAV 2017 Build 30219 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...

Audix - A PowerShell Tool To Quickly Configure The Windows Event Audit Policies For Security Monitoring

Audix will allow for the SIMPLE configuration of Windows Event Audit Policies. Window's Audit Policies are restricted by default. This means that for Incident Responders, Blue Teamers, CISO's & people looking to monitor their environment through use of Windows Event Logs, must configure the audit...

Cloud Native Application Development Enables New Levels of Security Visibility and Control

We are in unique times and it’s important to support each other through unique ways. Snyk is providing a community effort to make a difference through AllTheTalks.online, and Trend Micro is proud to be a sponsor of their virtual fundraiser and tech conference. In today’s threat landscape new clou...

Log Injection

util-linux is vulnerable to log injection. The vulnerability exists in util-linux when logging log in attempts via the audit subsystem of the Linux kernel. A remote attacker could use this flaw to modify certain parts of logged events, possibly hiding their activities on a system...

Audit Configuration Bypass

The kernel package is vulnerable to Audit Configuration Bypass. The Linux kernel system call auditing implementation on 64-bit systems allow a local, unprivileged user to circumvent a system call audit configuration, if that configuration filtered based on the "syscall" number or arguments...

Authorization Bypass

openssh is vulnerable to authorization bypass. The vulnerability exists as a flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools...

CVE-2019-10165

OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources...

Update Rollup 11 for System Center 2012 R2 Operations Manager

Update Rollup 11 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 R2 Operations Manager. It also contains the installation instructions for this update. Issues that are fixed in this...

Turning collaboration and customer engagement up with a strong identity approach

In these challenging times, it’s even more apparent that modern companies are managing a blended workforce that encompasses not only their full-time staff and customers but also their contractors, consultants, subsidiaries, suppliers, partners, and soon-to-be customers. Balancing friction-less...

Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)

Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.2.0.0 Vulnerability Type: Denial of Service DoS Local Tested o...