Security-Onion-Solutions/securityonion

Security-Onion-Solutions/securityonion

Releases127
Frequency3 weeks 20 hours
Last Release
Stars4.63K
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

CVE History

CVEPublishedCVSS v3CVSS v2
7.8 HIGH7.2 HIGH

Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>/SecurityOnion/setup/so-setup.