1449 matches found
PT-2020-7601
Name of the Vulnerable Software and Affected Versions MobileIron VSP versions prior to 5.9.1 MobileIron Sentry versions prior to 5.0 Description The issue is related to an authentication bypass due to an XML file containing obfuscated passwords. Recommendations For MobileIron VSP versions prior t...
CVE-2014-1409: XML Injection (aka Blind XPath Injection)
MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords...
Nord Security: Blind SSRF on debug.nordvpn.com due to misconfigured sentry instance
Summary: The debug subdomain uses Sentry for application monitoring and error tracking. This software comes with a feature known as source code scraping turned on by default which makes it is possible to make blind get requests from the server on which it is running. Steps To Reproduce: add detai...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
Design/Logic Flaw
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-6353: Incorrect Authorization
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
PT-2019-7838
Name of the Vulnerable Software and Affected Versions Cloudera Search in CDH versions prior to 5.7.0 Description The issue allows unauthorized access to documents because Solr queries by document id can bypass Sentry document-level security via the RealTimeGetHandler. Recommendations For versions...
Cross-Site Scripting (XSS)
sentry is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute malicious script in a victim's browser since it does not restrict direct imports of the marked library and renders the marked object without sanitization...
Authorization
In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and thereby potentially bypass authorization and audit mechanisms. Session and query IDs are unique an...
FreeBSD : Gitlab -- Disclosure Vulnerabilities (6eddfa51-fb44-11e9-86e9-001b217b3468)
Gitlab reports : Source branch of a MR could be removed by an unauthorised user Private group members could be listed Disclosure of System Notes via Elasticsearch integration Disclosure of Private Comments via Elasticsearch integration Confirm existence of private repositories Private group...
Gitlab -- Disclosure Vulnerabilities
Gitlab reports: Source branch of a MR could be removed by an unauthorised user Private group members could be listed Disclosure of System Notes via Elasticsearch integration Disclosure of Private Comments via Elasticsearch integration Confirm existence of private repositories Private group...
Zomato: Information Disclosure through Sentry Instance ███████
Hello team I found a bug sensitive information can be used from attackers to perfom attack in youre server I don't know if this in scope so i'm sorry if i'm wrrong withou spending youre time here the steps how i found this bug : 1-Please use burp suite to reproduce the same result 2-i notice you...
Unauthorized Modification
Apache Sentry is vulnerable to unauthorized modification attacks. An unauthorized user could execute ALTER TABLE EXCHANGE PARTITIONS which may allow an attacker to access unauthorized partitioned data of a Sentry protected table and to remove data from a Sentry protected table...
CVE-2017-9325
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs...
CVE-2017-9325
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs...
Authorization
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs...
CVE-2017-9325
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs...
