OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0815US | medium6.5 | — | ||
Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logg… | ||||
02
references
External citations — patches, advisories, analysis.
- https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13WEB
- https://github.com/OpenNMS/opennmsPACKAGE
- https://github.com/OpenNMS/opennms/pull/5741/filesWEB
- https://github.com/OpenNMS/opennms/releases/tag/opennms-31.0.4-1WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-0815ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan