Important: GLPI security update
Type/Severity
NetEye Product Security has rated this update as having a high security impact.
Topic
An update for the glpi packages is now available for NetEye 4.
Security Fix for NetEye 4.47
10.0.25_neteye1.18.0-1
Summary
The vulnerabilities include two Stored XSS, an Arbitrary file deletion, an Arbitrary item deletion, Arbitrary files access and two unauthorized actions.
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Affected Products
All NetEye 4.x versions
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://github.com/glpi-projeandct/glpi/releases/tag/10.0.25
Luca Tecchio
Software Developer - IT System & Service Management Solutions at Würth IT Italy
Author
Luca Tecchio
Software Developer - IT System & Service Management Solutions at Würth IT Italy
Related Content
Tags: Bug Fixes, Elastic Stack, NetEye Updates, Security Advisory
Bug Fixes for NetEye 4.48
Fix HEAD HTTP method not supported We resolved a compatibility issue affecting HEAD requests to NetEye endpoints. These requests could previously time out because the method was not fully supported by the underlying architecture. As a result, some procedures could Read MoreBug Fixes for NetEye 4.47
Fix IcingaDB password file sync on all cluster nodes. We have resolved an issue that caused an IcingaDB password file to be present only on one node in a cluster installation. This could lead to failures during NetEye updates and Read MoreFrom Elastic Observability to NetEye: Alerting with Tornado
With Elastic Observability we can create alerts on all data we collect, such as logs, metrics, application services and synthetic monitoring. However, NetEye represents the main operational console from which to monitor the entire infrastructure. By sending alarms from Elastic Read MoreBug Fixes for NetEye 4.47
Node export in the Tornado Processing Tree was broken on Firefox The bug was caused by a divergence between Firefox and Chrome in blob handling with CSP. Issue resolved, behavior is now consistent across both browsers. List of updated packages Read MoreSearch by technology
Contact
Categories
- AI(14)
- APM(83)
- Atlassian(71)
- Bug Fixes(501)
- Contribution(13)
- DDoS(1)
- Development(180)
- DevOps(76)
- Downloads / Release Notes(494)
- Events(186)
- Front-end(11)
- GLPI(7)
- Icinga Web 2(38)
- ITOA(91)
- Knowledge Management(14)
- Log-SIEM(205)
- Microsoft(16)
- NetEye(1,593)
- NetEye Extension Packs(3)
- Offensive Security(11)
- PHP(10)
- SEC4U(123)
- Service Management(298)
- UI(10)
- Unified Monitoring(475)
- UX(7)