Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 85
Wyczyść filtryInsertion of Sensitive Information into Log File in ansible
Ansible Exposes Sensitive Information
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller
Improper Verification of Cryptographic Signature in ansible
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
OS Command Injection and Improper Input Validation in ansible
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Path Traversal in Ansible
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Argument Injection in Ansible
Incorrect Permission Assignment for Critical Resource in Ansible
Path Traversal in Ansible
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Path Traversal in Ansible
OS Command Injection in ansible
Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.