Important Advisory: PagerDuty Process Automation On Prem / Rundeck Key Pair Misconfiguration

• Rundeck

  26 5,340 9.9 Groovy

  Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts

  

Yesterday we posted a Security Advisory to Github for a critical vulnerability in Rundeck Community and Rundeck Enterprise Docker images, versions 4.0 and earlier. Those Docker images contained a pre-generated SSH key pair in the default file path. If that key was used to configure SSH access to hosts, they would allow access to anyone with the exposed private key.

• affected-keys-checks

  1 1 10.0 Shell

  Collection of remediation options for exposed key vulnerabilities

  

If you think you may be impacted, use one of these options to scan your hosts for the exposed keys, delete any you find, and replace them with a new SSH key pair. You can find more information about the issue and resources for remediation here.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project