Sensu Core
Approved changes feed: RSS · Atom
cpe:2.3:a:sensu:sensu_core:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sensu (1a0c8510-7ce5-5eca-b180-bbbb2f5e2747) |
|---|---|
| Product | Sensu Core (046e1336-7113-5ea0-838e-e4719de7c2a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/sensu/sensu-go |
purl2cpe | 2026-06-01 10:12:33.429590 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1000209 |
vulnerable | 2026-06-08 05:10:25.648465 |
Details available
Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that can result in Unprivileged users may execute code in context of Sensu service account. This attack appear to be exploitable via Unprivileged user may place an arbitrary DLL in the c:\opt\sensu\embedded\bin directory in order to exploit standard Windows DLL load order behavior. This vulnerability appears to have been fixed in 1.4.2-3 and later.
Published: 2018-07-13T18:00:00.000Z
Updated: 2024-09-17T00:16:38.685Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000060 |
vulnerable | 2026-06-08 05:10:25.378911 |
Details available
Sensu, Inc. Sensu Core version Before 1.2.0 & before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b contains a CWE-522 vulnerability in Sensu::Utilities.redact_sensitive() that can result in sensitive configuration data (e.g. passwords) may be logged in clear-text. This attack appear to be exploitable via victims with configuration matching a specific pattern will observe sensitive data outputted in their service log files. This vulnerability appears to have been fixed in 1.2.1 and later, after commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b.
Published: 2018-02-09T23:00:00.000Z
Updated: 2024-08-05T12:33:49.051Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.