Cristian Mocanu

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Cisco Identity Services Engine (ISE) (الإصدارات المتأثرة غير محددة) الوصف: قد تسمح ثغرة أمنية في واجهة الإدارة المستندة إلى الويب الخاصة بـ Cisco Identity Services Engine (ISE) لمهاجم بعيد معتمد بتنفيذ هجمات البرمجة النصية عبر المواقع (XSS) ضد مستخدم الواجهة. تعود هذه الثغرة الأمنية إلى عدم كفاية التحقق من صحة المدخلات التي يقدمها المستخدم عبر واجهة الإدارة المستندة إلى الويب في النظام المتأثر. يمكن للمهاجم استغلال هذه الثغرة عن طريق حقن تعليمات برمجية ضارة في صفحات محددة من الواجهة. قد يؤدي الاستغلال الناجح لهذه الثغرة إلى تمكين المهاجم من تنفيذ تعليمات برمجية نصية تعسفية في سياق الواجهة المتأثرة أو الوصول إلى معلومات حساسة عبر المتصفح. لاستغلال هذه الثغرة، يجب أن يمتلك المهاجم بيانات اعتماد إدارية صالحة. التوصيات: في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة.

Name of the Vulnerable Software and Affected Versions: PAN-OS (affected versions not specified) Description: A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker-controlled server. This attack requires network access to the firewall management interface. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient file input validation in the web-based management interface, allowing an authenticated, remote attacker to upload malicious files to the web root of the application. This could enable the attacker to replace files and gain access to sensitive server-side information. The vulnerability can be exploited by uploading a malicious file to the web interface.

The issue is related to a lack of protection for the web page structure in the Cisco ISE web-based management interface, allowing for a potential cross-site scripting (XSS) attack. An authenticated, remote attacker could exploit this to conduct an XSS attack against a user of the web-based management interface of an affected device.

A vulnerability in the web-based management interface of the affected software could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This issue exists because the software does not properly validate HTTP requests, such as those sent to `/api` endpoints, allowing an attacker to exploit the vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to delete arbitrary files from the affected system.

A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This issue exists because the interface does not properly validate user-supplied input. An attacker could exploit this by persuading a user to click a crafted link, potentially allowing the execution of arbitrary script code in the context of the affected interface or access to sensitive browser-based information.

A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authenticated network-based attacker to mislead another authenticated PAN-OS administrator to click on a specially crafted link that performs arbitrary actions in the PAN-OS web interface as the targeted authenticated administrator.

An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system and send a specifically crafted request to the firewall that causes the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. This issue exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this by injecting malicious code into specific pages of the interface, potentially allowing the execution of arbitrary script code in the context of the interface or access to sensitive, browser-based information. The attacker would need valid administrative credentials to exploit this vulnerability.