Prevent logging invalid header values

Impact What kind of vulnerability is it? Apollo Server can log sensitive information Studio API keys if they are passed incorrectly with leading/trailing whitespace or if they have any characters that are invalid as part of a header value. Who is impacted? Users who all of the below: use either t...

PT-2023-30002 · Yugabyte · Yugabytedb

Name of the Vulnerable Software and Affected Versions: YugabyteDB Anywhere versions 2.0.0 through 2.17.3 Description: The issue is related to the lack of authorization checks in the controller responsible for setting the logging level. This controller does not ensure that the user is authenticate...

PT-2023-25047 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS version 9.2.0 Brocade Fabric OS versions prior to 9.2.0 Description: The firmwaredownload command on Brocade Fabric OS could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a...

CVE-2023-3252

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition...

CVE-2023-1995

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

CVE-2023-1995

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

Design/Logic Flaw

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

CVE-2023-1995

CVE-2023-1995 pertains to an Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, and HiRDB Structured Data Access Facility. Affected versions include HiRDB Server prior to 09-60-39, 09-65-23, 09-66-17, 10-01-10, 10-03-12, 10-04-06, 10-05-06, 10-06-02;...

CVE-2023-1995 Insufficient Logging Vulnerability in HiRDB

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

CVE-2023-1995 Insufficient Logging Vulnerability in HiRDB

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

Hitachi HiRDB Server 安全漏洞

Hitachi HiRDB Server is a relational database management system RDBMS from Hitachi, Japan. It is designed to provide organizations with a reliable, high-performance database solution for storing and managing large amounts of structured data. A security vulnerability exists in Hitachi HiRDB Server...

Tenable Nessus < 10.6.0 Multiple Vulnerabilities (TNS-2023-29)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-29 advisory. - A pass-back vulnerability exists where an authenticated, remote attacker with...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0 that stems from the presence of an arbitrary file write vulnerability, which allows an...

How to enable ACL logging for extended ACLs

This article is a guidance on how enable ACL logging for Extended ACLSimple ACL does not have this function...

PT-2023-17397 · Hitachi · Hitachi Hirdb Server With Addtional Function +2

Name of the Vulnerable Software and Affected Versions: Hitachi HiRDB Server versions before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02 Hitachi HiRDB Server With Addtional Function versions before 09-60-2M, before...

Fedora: Security Advisory for libqb (FEDORA-2023-5a717dd33d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: libqb-2.0.8-1.fc38

A "Quite Boring" library that provides high-performance, reusable features fo r client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...

CVE-2023-4456

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached...

Authorization

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached...

CVE-2023-4456 Openshift-logging: lokistack authorisation is cached too broadly

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached...