Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SolarWinds Kiwi Syslog Server 9.8 Clear all filters
TI-2021-14129 CVE-2021-35236 · GHSA-7fqp-g334-ghhw

Missing Secure Flag From SSL Cookie

Priority LOW 25

The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00519 Published 2021-10-27 Fixed in 9.8 CWE-614
TI-2021-14128 CVE-2021-35235 · GHSA-w85c-3fh8-gc58

ASP.NET Debug Feature Enabled

Priority LOW 27

The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01276 Published 2021-10-27 Fixed in 9.8 CWE-11
TI-2021-14126 CVE-2021-35233 · GHSA-rqwr-hf3j-vwq9

HTTP TRACK & TRACE Methods Enabled

Priority LOW 26

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0096 Published 2021-10-27 Fixed in 9.8 CWE-16