Lucene search
+L

105 matches found

CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•55 views

Graylog 代码问题漏洞

Graylog is a centralized log management solution from Graylog USA. The product supports capturing, storing, and analyzing logs in real-time, among other things. Graylog suffers from a code issue vulnerability that stems from the fact that in a multi-node Graylog cluster, after a user is explicitl...

3.1CVSS4.9AI score0.00482EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•1 views

CVE-2023-41041: Insufficient Session Expiration

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

3.1CVSS5.4AI score0.00482EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2023/07/06 8:47 p.m.•2509 views

Graylog user session is still usable after logout

Summary In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Details Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the...

3.1CVSS6.7AI score0.00482EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•22 views

PT-2023-5707 · Graylog · Graylog

Name of the Vulnerable Software and Affected Versions: Graylog versions prior to 5.0.9 Graylog versions prior to 5.1.3 Description: The issue is related to the incorrect session expiration in a multi-node Graylog cluster. After a user has explicitly logged out, a user session may still be used fo...

3.1CVSS3.6AI score0.00482EPSS
SaveExploits1References10
Fedora
Fedora
•added 2021/11/04 1:24 a.m.•58 views

[SECURITY] Fedora 33 Update: ansible-2.9.27-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5.5CVSS6.2AI score0.0039EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/07/06 12:00 a.m.•60 views

Fedora: Security Advisory for ansible (FEDORA-2021-4ad7c70d71)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1CVSS6.4AI score0.00897EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/05/03 2:06 a.m.•60 views

[SECURITY] Fedora 34 Update: ansible-2.9.20-1.fc34

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5.5CVSS3.3AI score0.00333EPSS
SaveExploits0
Fedora
Fedora
•added 2021/05/03 1:48 a.m.•68 views

[SECURITY] Fedora 33 Update: ansible-2.9.20-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5.5CVSS3.3AI score0.00333EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/05/03 12:00 a.m.•37 views

Fedora: Security Advisory for ansible (FEDORA-2021-c1116fb75e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.3AI score0.00333EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/09/26 12:00 a.m.•44 views

Fedora: Security Advisory for ansible (FEDORA-2020-c3e6f30f53)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1CVSS7.5AI score0.00233EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/09/01 7:33 p.m.•97 views

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.9.13)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

7.1CVSS7.4AI score0.00233EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/09/01 7:32 p.m.•106 views

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.8.15)

An update for ansible is now available for Ansible Engine 2.8 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.1CVSS6.9AI score0.00573EPSS
SaveExploits2References2
Fedora
Fedora
•added 2020/04/27 3:07 a.m.•52 views

[SECURITY] Fedora 30 Update: ansible-2.9.7-1.fc30

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.9CVSS3.3AI score0.0051EPSS
SaveExploits3
Fedora
Fedora
•added 2020/04/27 2:46 a.m.•44 views

[SECURITY] Fedora 32 Update: ansible-2.9.7-1.fc32

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.9CVSS3.3AI score0.0051EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2020/04/22 2:10 p.m.•94 views

Important: Red Hat Security Advisory: Ansible security and bug fix update (2.9.7)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.9CVSS6.7AI score0.0051EPSS
SaveExploits3References11
OpenVAS
OpenVAS
•added 2020/03/17 12:00 a.m.•92 views

Fedora: Security Advisory for ansible (FEDORA-2020-87f5e1e829)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.6AI score0.03113EPSS
SaveExploits1References2
Fedora
Fedora
•added 2020/03/16 8:49 p.m.•76 views

[SECURITY] Fedora 32 Update: ansible-2.9.6-1.fc32

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.8CVSS6.7AI score0.03113EPSS
SaveExploits1
Fedora
Fedora
•added 2020/03/15 1:43 p.m.•53 views

[SECURITY] Fedora 31 Update: ansible-2.9.6-1.fc31

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.8CVSS6.8AI score0.00365EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/03/11 1:08 p.m.•13 views

Moderate: Red Hat Bug Fix Advisory: Ansible 2.9.6 release for Ansible Engine 2.9

Ansible 2.9.6 release for Ansible Engine 2.9 Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in...

5.5CVSS6.9AI score0.00439EPSS
SaveExploits1
Fedora
Fedora
•added 2020/01/31 1:14 a.m.•81 views

[SECURITY] Fedora 30 Update: ansible-2.9.3-1.fc30

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.3CVSS6.7AI score0.01868EPSS
SaveExploits1
Rows per page
Query Builder