CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

CVE-2022-23709: Missing Authorization

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

Elastic Stack Kibana security vulnerabilities

Elasticsearch Kibana is an open source, browser-based analysis and search Elasticsearch dashboard tool from the Dutch company Elasticsearch.Elasticsearch Kibana is vulnerable to an authorization issue that could be exploited by an attacker to create new alert rules or override existing rules...

PT-2022-16219

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description A flaw was discovered in Kibana where users with Read access to the Uptime feature could modify alerting rules, allowing them to create new rules or overwrite existing ones. However, any new o...

CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

DEBIAN-CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

Code injection

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

UBUNTU-CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

CVE-2022-0675 Puppet Firewall Module May Leave Unmanaged Rules

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

CVE-2022-0675

CVE-2022-0675 affects Puppet Firewall module behavior: in IPT-based firewall rules, an unmanaged rule can share the same comment as a manifest rule, causing Puppet to leave the unmanaged rule and still apply the manifest rule, leaving the system in an unsafe state. The issue impacts Linux/OpenSta...

CVE-2022-0675: Improper Validation of Unsafe Equivalence in Input

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

PT-2022-13349

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue arises when an unmanaged rule on the target system shares the same comment as a rule specified in the manifest. This can lead to the existence o...

Puppet input validation vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, and more. A security vulnerability exists in the Puppet Firewall Module, which stems...

5 things to consider in performance comparisons

Most people can probably relate to asking a child to handle a chore, only to have the kid come back way too soon, saying it's done. Or maybe you can relate to being that child. Either way, you know what comes next: checking shows the job was handled poorly, and it all goes downhill from there. It...

WordPress WooCommerce Dynamic Pricing and Discount Rules plugin <= 2.2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Dynamic Pricing and Discount Rules plugin versions = 2.2.2. Solution Update the WordPress WooCommerce Dynamic Pricing and Discount Rules plugin to the latest available version at least 2.2.3...

WordPress WooCommerce Dynamic Pricing and Discount Rules plugin <= 2.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Dynamic Pricing and Discount Rules plugin versions = 2.2.2. Solution Update the WordPress WooCommerce Dynamic Pricing and Discount Rules plugin to the latest available version at least 2.2....