CVE-2014-9247

Mô tả

Tham khảo

• kb.cert.org/vuls/id/449452 · Third Party Advisory
• docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit · Vendor Advisory

Lỗ hổng khác của zenoss core

• CVE-2014-6262CAO 7.5Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote…
• CVE-2014-9386TRUNG BÌNH 6.8Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack ses…
• CVE-2014-9385TRUNG BÌNH 6.8Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the authentication of arbi…
• CVE-2014-9252THẤP 2.1Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive informati…
• CVE-2014-9251TRUNG BÌNH 5.0Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleart…