Vulnerability of the MySQL Server component: The logging system of the MySQL Database Management System Server allows attackers to disclose sensitive information.

Vulnerability of the MySQL Server component: The logging system of the MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through network packets...

Weave GitOps leaked cluster credentials into logs on connection errors

Impact A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of registered Kubernetes clusters, including the service account tokens in plain text from Weave GitOps's pod logs on the management cluster...

GHSA-XGGC-QPRG-X6MW Weave GitOps leaked cluster credentials into logs on connection errors

Impact A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of registered Kubernetes clusters, including the service account tokens in plain text from Weave GitOps's pod logs on the management cluster...

PT-2022-20525 · Weave · Weave Gitops

Name of the Vulnerable Software and Affected Versions: Weave GitOps versions prior to v0.8.1-rc.6 Description: A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of registered Kubernetes clusters,...

OPENSUSE-SU-2022:10023-1 Security update for tor

This update for tor fixes the following issues: tor was updated to 0.4.7.8: Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious...

CVE-2022-32549 log injection in Sling logging

Apache Sling Commons Log = 5.4.0 and Apache Sling API = 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files...

CVE-2022-20651

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

Design/Logic Flaw

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

CVE-2022-20651 Cisco Adaptive Security Device Manager Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

CVE-2022-20651

CVE-2022-20651 describes an information-disclosure in the Cisco ASDM logging component. An authenticated, local attacker could access logs on a shared workstation and read unencrypted credentials stored there, leaking other users’ credentials. The issue is tied to how ASDM logs store sensitive da...

SAP NetWeaver AS Java Insufficient Logging

When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator Administrator applications, version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted. Note that Nessus has not tested for this issue but has instead...

Malicious code in aws-centralized-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5845c75da441cd748a399b12e5782955af2a324bbfa02ad3f3f2cf7c0a467fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1192 Malicious code in aws-centralized-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5845c75da441cd748a399b12e5782955af2a324bbfa02ad3f3f2cf7c0a467fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in voicemail-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fee58a9bb8a7e9ab7919ae349ac245c8e1064b3c12ecb328c0635b942cd06d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6958 Malicious code in voicemail-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fee58a9bb8a7e9ab7919ae349ac245c8e1064b3c12ecb328c0635b942cd06d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ibm-pipeline/logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2a2cdb3bc14845ecbf9b595e8481d32046cbce9bf164e9c4182145f51951a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-342 Malicious code in @ibm-pipeline/logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2a2cdb3bc14845ecbf9b595e8481d32046cbce9bf164e9c4182145f51951a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1170 Malicious code in audit-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f664ae26ee0d9606ef9d7901b65dc80da1f73baee088eeda8ab6025dabf096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in audit-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f664ae26ee0d9606ef9d7901b65dc80da1f73baee088eeda8ab6025dabf096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2022:10016-1 Security update for firejail

This update for firejail fixes the following issues: firejail was updated to version 0.9.70: - CVE-2022-31214 - root escalation in --join logic boo1199148 Reported by Matthias Gerstner, working exploit code was provided to our development team. In the same time frame, the problem was independentl...