OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0815US | medium6.5 | — | ||
Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logg… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13WEB
- https://github.com/OpenNMS/opennmsPACKAGE
- https://github.com/OpenNMS/opennms/pull/5741/filesWEB
- https://github.com/OpenNMS/opennms/releases/tag/opennms-31.0.4-1WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-0815ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan