CVE-2024-24811

SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. The problem has been patched in version...

Spoofing

SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. The problem has been patched in version...

CVE-2024-24811 Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution

SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. The problem has been patched in version...

ZSQL: Content of DV_HBA Database

This script writes the complete database of DVHBA to KB. Note: this script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZSQL: Log File Permission

The LOGFILEPERMISSIONS parameter specifies the log file permission. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZSQL: Log Directory Permission

The LOGPATHPERMISSIONS parameter specifies the log directory permission. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZSQL: Maximum Capacity of an Audit Log File

The parameter AUDITMAXFILESIZE specifies the maximum capacity of an audit log file. The default unit is byte and the default value is 10M. If the size of an audit log file reaches the specified value, another audit log file is automatically created. SPDX-FileCopyrightText: 2020 Greenbone AG Some...

ZSQL: Check whether User PUBLIC has Object Permission

Every user automatically belongs to user PUBLIC. For database security, do not grant object permissions to user PUBLIC SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZSQL: Number Of Password Changes Required Before the Current Password Can Be Reused

Configure the number of password changes required before the current password can be reused. The configuration prevents a password from being cracked due to repeated use. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

ZSQL: Local Trust Authentication

In local trust authentication mode, a database user can connect to the local database in password-free mode using zsql after the local connection is authenticated. Then, this user can maintain database accounts. You are advised to disable the local trust authentication during service running...

ZSQL: Number of Failed Login Attempts

The FAILEDLOGINATTEMPTS parameter specifies the maximum number of login attempts allowed before an account is locked. If the number of an account SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

ZSQL: Content of ADM_PROFILES Database

This script writes the complete database of ADMPROFILES to KB. Note:This script stores values in KB only and has no output. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZSQL: Default Listening Port

Change the listening port from the default 1611 to another value, protecting the database from malicious clients. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZSQL: Maximum Number of Connections

If the maximum number of online connections is set to a large value, the required process socket handles and session pool memory may exceed the OS limit on the server. - Value: The minimum value to be compliant. - Maximum: The maximum value to be compliant. SPDX-FileCopyrightText: 2020 Greenbone ...

ZSQL: Check for users with CREATE DATABASE permission

Searches for users and roles with CREATE DATABASE permission and checks whether they are authorized to have it. A user with the CREATE DATABASE permission can creata a database. If this permission is no longer necessary, revoke it. Copyright C 2020 Greenbone Networks GmbH Some text descriptions...

ZSQL: Check for users with ALTER USER permission

Searches for users and roles with ALTER USER permission and checks whether they are authorized to have it.A user with the ALTER USER permission can modify other users. If this permission is no longer necessary, revoke it. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...

ZSQL: Content of ROLE SYS PRIVS Database

This script writes the complete database of ROLE SYS PRIVS to KB. Note:This script stores values in KB only and has no output. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZSQL: Disabling the Use of 0.0.0.0 and :: for Listening

0.0.0.0 indicates that all available IPv4 addresses on the local host are listened, and :: indicates that all available IPv6 addresses on the local host are listened. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

ZSQL: Check for users with WITH GRANT OPTION permission

Searches for users with the WITH GRANT OPTION permission and checks whether they are authorized to have it. Users with this permission can grant object permissions to other users. For database security, specify this permission attribute only when absolutely necessary. SPDX-FileCopyrightText: 2020...

ZSQL: Content of ADM_TAB_PRIVS database

This script writes the complete database of ADMTABPRIVS to KB. Note:This script stores values in KB only and has no output. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...