EUVD-2014-6143

Malware in sbrugna...

Cross site scripting

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407...

PT-2014-7123

Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method. Recommendations For versions through 5 Beta 3, at the...

CVE-2014-6257: Undefined Security Weakness

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407...