Test Kennung:	1.3.6.1.4.1.25623.1.0.113373
Kategorie:	Web application abuses
Titel:	Tildeslash Monit < 5.25.3 Multiple Vulnerabilities
Zusammenfassung:	Monit is prone to multiple vulnerabilities.
Beschreibung:	Summary: Monit is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Persistent Cross-Site Scripting (XSS) in http/cervlet.c allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during a _viewlog operation - A buffer over-read in Util_urlDecode allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also use this to cause a Denial of Service Affected Software/OS: Monit through version 5.25.2. Solution: Update to version 5.25.3. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11454 Common Vulnerability Exposure (CVE) ID: CVE-2019-11455
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.