CVE-2016-9257

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to...

Information Disclosure Via Logs

fatfreecrm is vulnerable to information disclosure. The vulnerability exists because password related attributes such as passwordhash, passwordsalt and passwordconfirmation are not filtered from the logs, exposing sensitive information to malicious users...

May 9, 2017—KB4019213 (Security-only update)

None None...

Information Disclosure

atlas-webapp is vulnerable to information disclosure. The library prints sensitive information in its stack trace error logs. A malicious user can then access sensitive information stored on these logs...

Cowrie - SSH/Telnet Honeypot

Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. Cowrie is developed by Michel Oosterhof. Features Some interesting features: Fake filesystem with the ability to add/remove files. A full fake filesystem...

Download Monitor <= 1.9.6 - Unauthenticated Downloading of Logs

An Unauthenticated attacker can export download logs from the Plugin. Which includes: Download ID, Version ID, Filename, User ID, User Login, User Email, User IP, User Agent, Date, Status. The information could potentially be used to mount further attacks or just collect contact information...

Information Disclosure

github.com/acalephstorage/consul-alerts is vulnerable to information disclosure. The library displays the ACL token in the logs...

Arbitrary Log Read

github.com/kubernetes/kubernetes is vulnerable to arbitrary log reads. Using a container name, attackers are able to read the pod logs...

CVE-2016-5006

The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors...

How to Configure NetScaler MAS Simplified Audit Log Management

This article describes how to configure NetScaler MAS simplified audit log management. Background Audit logs are generated and stored centrally in the NetScaler MAS server's database for all the changes you make on the NetScaler instances through NetScaler MAS. These logs can be filtered by modul...

SolarWinds Log and Event Manager Postgres Database Security Bypass Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security bypass vulnerability exists in the Postgres database of SolarWinds Log and Event Manager 6.3.1, which stems from the database having a...

TP-Link TL-SG108E Certificate Disclosure Vulnerability

The TP-Link TL-SG108E is a Gigabit Ethernet switch. A security vulnerability exists in the TP-Link TL-SG108E. A remote attacker can exploit the vulnerability to read 'SEND data' logs and retrieve certificates...

TP-Link TL-SG108E 'Switch Info' Certificate Disclosure Vulnerability

The TP-Link TL-SG108E is a Gigabit Ethernet switch. A security vulnerability exists in the TP-Link TL-SG108E. A remote attacker can exploit the vulnerability to read 'Switch Info' logs and retrieve certificates...

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...

Cloudera Manager =< 5.5 Process logs access (CVE-2016-4949)

Cloudera Manager =:7180/cmf/process//logs?filename=stderr,stdout.log The prerequisite to exploit this vulnerability is to know or iterate the targeted process identifier. The impact of the vulnerability is that a poorly developed process might contain sensitive information. The Cloudera CERT...

PT-2017-4159

Name of the Vulnerable Software and Affected Versions OpenStack Swift versions 2.10.1 and earlier OpenStack Swift versions 2.11.0 through 2.13.0 OpenStack Swift version 2.14.0 OpenStack Swift versions prior to 2.15.2 Description The issue is related to the proxy-server logging full tempurl paths ...

CVE-2017-8075

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...

CVE-2017-8074

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...

Session fixation

The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have...

The CIS Critical Security Controls Explained – Control 6: Maintenance, Monitoring and Analysis of Audit Logs

In your organizational environment, Audit Logs are your best friend. Seriously. This is the sixth blog of the series based on the CIS Critical Security Controls. Ill be taking you through Control 6: Maintenance, Monitoring and Analysis of Audit Logs, in helping you to understand the need to nurtu...