Vulnerabilidades de Eyesofnetwork

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Eyesofnetwork: 2 registro(s), com severidade, exploração e correções.

Eyesofnetwork 2

Somente exploradas (KEV) →

CVE-2020-8655 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-269 06/02/2020

EyesOfNetwork Improper Privilege Management Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

CVE-2020-8657 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-798 06/02/2020

EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.