漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
ASP.NET Debug Feature Enabled
Vulnerability Description
The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web applications, if configured to do so. Debug mode causes ASP.NET to compile applications with extra information. The information enables a debugger to closely monitor and control the execution of an application. If an attacker could successfully start a remote debugging session, this is likely to disclose sensitive information about the web application and supporting infrastructure that may be valuable in targeting SWI with malicious intent.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
ASP.NET误配置:创建Debug模式二进制
Vulnerability Title
Solarwinds Kiwi Syslog Server 安全漏洞
Vulnerability Description
Solarwinds Kiwi Syslog Server是美国Solarwinds公司的一款适用于网络和系统工程师的经济实惠的 Syslog 管理工具。用于从网络设备(路由器、交换机、防火墙等)和 Linux®/Unix® 主机接收系统日志消息和 Snmp 陷阱。 Solarwinds Kiwi Syslog Server 9.7.2及之前版本存在安全漏洞,攻击者可通过启动"ASP.NET debug feature"来获取Web应用程序和支持基础设施的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A