Vulnerabilidades do Eyesofnetwork Eyesofnetwork

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Eyesofnetwork Eyesofnetwork: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:eyesofnetwork:eyesofnetwork

CVE-2020-8655 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-269 06/02/2020

EyesOfNetwork Improper Privilege Management Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

CVE-2020-8657 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-798 06/02/2020

EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.