Lucene search
+L

112 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 7:02 p.m.•32 views

OctoPrint Incorrect Access Control

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.4AI score0.01503EPSS
SaveExploits1References7Affected Software1
RedHat Linux
RedHat Linux
•added 2022/05/11 6:50 p.m.•81 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.4.1

Logging Subsystem 5.4.1 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...

7.5CVSS7AI score0.06565EPSS
SaveExploits0References8
ThreatPost
ThreatPost
•added 2021/07/09 5:31 p.m.•116 views

Cisco BPA, WSA Bugs Allow Remote Cyberattacks

A set of high-severity privilege-escalation vulnerabilities affecting Business Process Automation BPA application and Cisco’s Web Security Appliance WSA and could allow authenticated, remote attackers to access sensitive data or take over a targeted system. The first two bugs CVE-2021-1574 and...

9CVSS8.1AI score0.01879EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2021/05/11 2:15 p.m.•21 views

CVE-2021-32560

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.5AI score
SaveExploits0References3
Prion
Prion
•added 2021/05/11 2:15 p.m.•28 views

Improper access control

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

4CVSS6.4AI score0.01503EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2021/05/11 2:15 p.m.•13 views

CVE-2021-32560

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References5
PyPA
PyPA
•added 2021/05/11 2:15 p.m.•16 views

PYSEC-2021-29

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.9AI score0.01503EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2021/05/11 2:15 p.m.•35 views

PYSEC-2021-29

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS2.2AI score0.01503EPSS
SaveExploits1References4
Mend
Mend
•added 2021/05/11 1:36 p.m.•3 views

CVE-2021-32560

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

7.1CVSS0.01503EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/11 12:00 a.m.•6 views

CVE-2021-32560: Undefined Security Weakness

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS5.7AI score0.01503EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/05/11 12:00 a.m.•2 views

PT-2021-19782

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.6.0 Description The issue is related to incorrect access control in the Logging subsystem, which attempts to manage files that are not .log files. This could potentially lead to unauthorized access or manipulation...

7.1CVSS0.01503EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2021/05/11 12:00 a.m.•22 views

OctoPrint Access Control Vulnerability

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability previously existed in OctoPrint version 1.6.0. The vulnerability stemmed from the Logging subsystem in the program having incorrect access control...

6.5CVSS6.4AI score0.01503EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•17 views

Cisco Data Center Network Manager Logging Unauthorized Access

The vulnerability of the logging subsystem of the Cisco Data Center Network Manager DCNM is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00287EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•47 views

Cisco Data Center Network Manager Information Disclosure Vulnerability (CNVD-2021-09946)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An information disclosure vulnerability exists in the logging subsystem of Cisco...

5.5CVSS5.9AI score0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/20 8:15 p.m.•39 views

CVE-2021-1283

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.1AI score0.00287EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/20 8:15 p.m.•30 views

Design/Logic Flaw

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

2.1CVSS5.1AI score0.00287EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/01/20 7:56 p.m.•16 views

CVE-2021-1283 Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS6AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/20 7:56 p.m.•45 views

CVE-2021-1283 Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.3AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/20 7:56 p.m.•82 views

CVE-2021-1283

Cisco Data Center Network Manager (DCNM) is affected by an information-disclosure vulnerability in its logging subsystem. The issue arises because sensitive data is not properly masked before being written to system log files, allowing an authenticated, local attacker with valid credentials to vi...

5.5CVSS5AI score0.00287EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/01/20 4:00 p.m.•11 views

CVE-2021-1283

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.9AI score0.00287EPSS
SaveExploits0References2
Rows per page
Query Builder