EUVD-2021-24609

Malware in sbrugna...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

Design/Logic Flaw

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

Corero Network Security Corero SecureWatch Managed Services 授权问题漏洞

Corero Network Security Corero SecureWatch Managed Services is a provider of Corero SecureWatch Managed Services from Corero Network Security, USA. An authorization issue vulnerability exists in Coreo SecureWatch Managed Services 9.7.2.0020, which allows an attacker to perform actions that do not...

Corero SecureWatch Managed Services 路径遍历漏洞

Corero Network Security Corero SecureWatch Managed Services is a provider of Corero SecureWatch Managed Services from Corero Network Security in the United States. A path traversal vulnerability exists in Corero SecureWatch Managed Services 9.7.2.0020, which arises from a network system or produc...