8872 matches found
Moderate: Red Hat Security Advisory: Logging 5.6.16 - Red Hat OpenShift
Logging 5.6.16 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References sectio...
CVE-2024-23448
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this cou...
CVE-2024-23448
APM Server vulnerability CVE-2024-23448: when Elasticsearch returns a failure while indexing a document, the response may be logged at ERROR level and could include parts of the original document, potentially exposing sensitive data in APM Server logs. Affected product: APM Server (Elastic). Root...
CVE-2024-23448 APM Server Insertion of Sensitive Information into Log File
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this cou...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.7.11 - Red Hat OpenShift
Logging Subsystem 5.7.11 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
Actions to take today to mitigate Volt Typhoon activity: 1. Apply patches for internet-facing systems. Prioritize patching critical vulnerabilities in appliances known to be frequently exploited by Volt Typhoon. 2. Implement phishing-resistant MFA. 3. Ensure logging is turned on for application,...
CVE-2024-24939
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
CVE-2024-24939
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
Design/Logic Flaw
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
CVE-2024-24939
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
CVE-2024-24939
In JetBrains Rider, prior to version 2023.3.3, the product could log environment variables that contained secret values. This was reported across multiple sources (NVD, Red Hat, PRION/PTSecurity and others), with the common root cause described as inadequate handling/logging of sensitive environm...
CVE-2024-24939
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
Inaccurate Logging
go.etcd.io/etcd is vulnerable to Inaccurate Logging. The vulnerability is due to errors being logged with insufficient information regarding why the authentication failed. This may be misleading while auditing etcd logs...
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only
Vulnerability type Logging Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regarding why the authentication failed, and may be...
GHSA-VJG6-93FV-QV64 Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only
Vulnerability type Logging Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regarding why the authentication failed, and may be...
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only
Vulnerability type Logging Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regarding why the authentication failed, and may be...
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only
Vulnerability type Logging Detail etcd users who have no password can authenticate only through a client certificate. When such users try to authenticate into etcd using the Authenticate endpoint, errors are logged with insufficient information regarding why the authentication failed, and may be...
SUSE CVE-2024-1141
A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...
glance-store logs s3 access keys
A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...