Tag
Glances XML-RPC Server Cross-Origin Information Disclosure
2 rules 3 TTPs 1 IOCThe Glances XML-RPC server exposes sensitive system information due to a permissive CORS policy and missing Content-Type validation, enabling attackers to bypass CORS restrictions and steal data like hostnames, OS details, IP addresses, and process lists.
Glances Cross-Origin Information Disclosure via Unauthenticated REST API
2 rules 3 TTPs 1 CVEGlances versions before 4.5.4 are vulnerable to cross-origin information disclosure, where a malicious website can retrieve sensitive system information from a running Glances instance due to a permissive CORS policy on the `/api/4/all` endpoint.
Glances Command Injection Vulnerability via Dynamic Configuration
2 rules 2 TTPsGlances versions 4.5.2 and earlier are vulnerable to command injection via dynamic configuration values, allowing arbitrary command execution with the privileges of the Glances process if an attacker can modify or influence configuration files, potentially leading to privilege escalation.