org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2018-11087 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2018-14380 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=2.4.5)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2018-14380 Source advisory: MEND:CVE-2018-14380...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2018-11650 Source advisory: MEND:CVE-2018-11650...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2018-11651 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2018-11651 Source advisory: MEND:CVE-2018-11651...

Graylog2 LDAP Authentication Bypass Vulnerability

The remote version of Graylog2 is affected by a vulnerability that allows remote attackers, using crafted wildcards, to bypass the authentication mechanisms when the installation is configured to use LDAP authentication. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Graylog2 Default Credentials

The remote host is running Graylog2, a log collection and analysis system, which is using a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid81260; scriptversion"1.3";...

Graylog2 Web Interface Detection

Binary data graylog2webinterfacedetect.nbin...

CVE-2014-9217

Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards...

Authentication flaw

Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards...

CVE-2014-9217

CVE-2014-9217 affects Graylog2 prior to 0.92, where remote attackers can bypass LDAP authentication by using crafted wildcards when LDAP is configured. The vulnerability enables an authentication bypass on affected installations; no other impacts are described in the provided documents. Affected ...

CVE-2014-9217

Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards...

CVE-2014-9217: Improper Authentication

Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards...

PT-2014-8882

Name of the Vulnerable Software and Affected Versions Graylog2 versions prior to 0.92 Description The issue allows remote attackers to bypass LDAP authentication by using crafted wildcards, potentially leading to unauthorized access. Recommendations For versions prior to 0.92, update to version...