Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CISOfy Lynis 信息泄露漏洞
Vulnerability Description
CISOfy Lynis是荷兰CISOfy公司的一款支持多个平台的系统安全审核工具。 CISOfy Lynis 2.x版本至2.7.5版本中存在安全漏洞。攻击者可通过观察进程列表利用该漏洞获取许可证密钥。
CVSS Information
N/A
Vulnerability Type
N/A