CVE-2021-35231

概要

参考情報

• documentation.solarwinds.com/en/success_center/kss/content/release_notes/kss_9-8_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/cve-2021-35231 · Vendor Advisory

kiwi syslog server のその他の脆弱性

• CVE-2021-35237中 4.3A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that…
• CVE-2021-35236中 5.3The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to on…
• CVE-2021-35235中 5.3The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web ap…
• CVE-2021-35233中 5.3The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only…