Aaron Herndon

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Securden Unified PAM Remote Vendor Gateway (الإصدارات المتأثرة غير محددة) الوصف: تشارك بوابة الوصول الخاصة بـ Securden Unified PAM Remote Vendor Gateway البنية التحتية ورموز الوصول بين عدة مستأجرين. يمكن لمهاجم خبيث الحصول على بيانات المصادقة والوصول إلى خادم البوابة بامتيازات منخفضة. التوصيات: في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.

**Name of the Vulnerable Software and Affected Versions** Kyocera Net View (affected versions not specified) **Description** The issue concerns an insufficiently protected address book export function in Kyocera Net View, which unintentionally exposes sensitive user information, including `usernames` and `passwords`. This allows a remote attacker to disclose protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Sage X3 System (affected versions not specified) Description: The issue allows an authenticated user with developer access to inject OS commands via the `CHAINE` variable used by the web application. It is noted that this developer configuration should not be deployed in production. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Sage X3 versions prior to 9 with Syracuse 9.22.7.2 Sage X3 HR & Payroll versions prior to 9 with Syracuse 9.24.1.3 Sage X3 versions prior to 11 with Syracuse 11.25.2.6 Sage X3 versions prior to 12 with Syracuse 12.10.2.8 Description: A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. This issue can be combined with another vulnerability to achieve full remote code execution (RCE). Recommendations: For Sage X3 versions prior to 9 with Syracuse 9.22.7.2, update to AdxAdmin 93.2.53 or later. For Sage X3 HR & Payroll versions prior to 9 with Syracuse 9.24.1.3, update to AdxAdmin 93.2.53 or later. For Sage X3 versions prior to 11 with Syracuse 11.25.2.6, update to AdxAdmin 93.2.53 or later. For Sage X3 versions prior to 12 with Syracuse 12.10.2.8, update to AdxAdmin 93.2.53 or later.