CVE-2021-35231

Mô tả

Tham khảo

• documentation.solarwinds.com/en/success_center/kss/content/release_notes/kss_9-8_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/cve-2021-35231 · Vendor Advisory

Lỗ hổng khác của kiwi syslog server

• CVE-2021-35237TRUNG BÌNH 4.3A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that…
• CVE-2021-35236TRUNG BÌNH 5.3The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to on…
• CVE-2021-35235TRUNG BÌNH 5.3The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web ap…
• CVE-2021-35233TRUNG BÌNH 5.3The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only…