An update for the package geomap is now available for NetEye 4.
NetEye Product Security has rated this update as having a security impact of High. Common Vulnerability Scoring System (CVSS) base scores provide additional guidance about a vulnerability and give a detailed severity rating.
Description
geomap is a NetEye package used for maps visualization.
An improper input validation causes Cross Site Scripting when the layers is displayed in maps (CWE-79)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed in the References section.
Solution
Update geomap to latest version (1.19.1-1).
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section inside the User Guide.
Affected Products
All NetEye 4.x versions prior to and including 4.35
Important: GeoMap update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 1.22.4 - 1 CVSSv3.1: 7.3(High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N For Read More
Important: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the package kibana is now available for NetEye 4. Security Fix for NetEye 4.40 8.17.3_neteye3.72.11-1 CVSSv3.1: 9.9(Critical) Read More
Fix for icinga2 satellites zone validation Fixed an issue with the icinga2 satellites zone validation that caused the neteye satellite config create to fail if one of the icinga2-zone is a sub-string of the others List of updated packages To Read More
Remove "Drop non-existing group during Sync" on LDAP user federations Remove flag “Drop non-existing group during Sync” on LDAP user federations List of updated packages To solve the issue, the following packages have been updated: keycloak, keycloak-autosetup, keycloak-configurator, keycloak-python, to Read More
Important: IcingWeb2 Module Analytics security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the package icingaweb2-module-analytics is now available for NetEye 4. Security Fix for NetEye 4.40 1.60.3-1 CVSS: 6.3 (medium): CVSS3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Read More
