PT-2020-12322

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue arises from the use of a hardcoded API key, specifically 1fea123e07f730f76e661bced33a94152378611e, instead of generating a random API key for WebSocket connections. This could...

CVE-2020-8657

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. Recent assessments: Assessed Attack...

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

This module exploits multiple vulnerabilities in EyesOfNetwork version 5.1, 5.2 and 5.3 in order to execute arbitrary commands as root. This module takes advantage of a command injection vulnerability in the target parameter of the AutoDiscovery functionality within the EON web interface in order...