For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments, and other relevant information, please refer to the links provided in the References section below.
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Affected Products
All NetEye 4.x versions before and including 4.40.
Fix missing event module field in El Proxy signed documents We recently identified and fixed a bug affecting Elasticsearch logs signed by El Proxy. The issue stemmed from missing index templates for Elastic Agent integrations, causing logs to match the Read More
Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a security impact of Low Topic An update for the package glpi is now available for NetEye 4. Security Fix for NetEye 4.40 10.0.18_neteye1.17.1-1 For more details about Read More
Fix for icinga2 check processing We fixed a race-condition in icinga2, where a lock was not held long enough, causing threads to overwrite local state when processing two simultaneous check results for the same object. List of updated packages To Read More
Important: GeoMap update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 1.22.4 - 1 CVSSv3.1: 7.3(High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N For Read More
Important: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the package kibana is now available for NetEye 4. Security Fix for NetEye 4.40 8.17.3_neteye3.72.11-1 CVSSv3.1: 9.9(Critical) Read More