PT-2021-20855 · Unknown · Kiwi Syslog Server

Published 2021-10-27 · Updated 2021-10-28 · CVE-2021-35233

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Kiwi Syslog Server versions 9.7.1 and earlier

Description: The HTTP TRACK and TRACE methods are enabled, which can lead to the disclosure of sensitive information such as internal authentication headers appended by reverse proxies. These methods are intended for diagnostic purposes only, but if enabled, the web server will respond to requests by returning the exact HTTP request received in the response to the client.

Recommendations: For Kiwi Syslog Server versions 9.7.1 and earlier, consider disabling the HTTP TRACK and TRACE methods to prevent the disclosure of sensitive information. As a temporary workaround, restrict access to the web server to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2021-35233

Affected Products

Kiwi Syslog Server

References · 5

• https://solarwinds.com/trust-center/security-advisories/CVE-2021-35233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-35233 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35233 · Vendor Advisory
• https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kss_9-8_release_notes.htm · Vendor Advisory
• https://t.me/cvenotify/22432 · Telegram Post