Dan Marin

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Cisco Identity Services Engine (ISE) (الإصدارات المتأثرة غير محددة) الوصف: قد تسمح ثغرة أمنية في واجهة الإدارة المستندة إلى الويب الخاصة بـ Cisco Identity Services Engine (ISE) لمهاجم بعيد معتمد بتنفيذ هجمات البرمجة النصية عبر المواقع (XSS) ضد مستخدم الواجهة. تعود هذه الثغرة الأمنية إلى عدم كفاية التحقق من صحة المدخلات التي يقدمها المستخدم عبر واجهة الإدارة المستندة إلى الويب في النظام المتأثر. يمكن للمهاجم استغلال هذه الثغرة عن طريق حقن تعليمات برمجية ضارة في صفحات محددة من الواجهة. قد يؤدي الاستغلال الناجح لهذه الثغرة إلى تمكين المهاجم من تنفيذ تعليمات برمجية نصية تعسفية في سياق الواجهة المتأثرة أو الوصول إلى معلومات حساسة عبر المتصفح. لاستغلال هذه الثغرة، يجب أن يمتلك المهاجم بيانات اعتماد إدارية صالحة. التوصيات: في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة.

قد تسمح ثغرة أمنية في واجهة برمجة تطبيقات (API) Cisco ISE لمهاجم بعيد معتمد بتنفيذ أوامر تعسفية بصفته مستخدم «root» على جهاز متأثر. تحدث هذه المشكلة بسبب عملية إزالة التسلسل غير الآمنة لتدفقات بايت Java التي يقدمها المستخدم بواسطة البرنامج المتأثر. يمكن للمهاجم استغلال هذه الثغرة الأمنية عن طريق إرسال كائن Java مُسلسل تم التلاعب به إلى واجهة برمجة التطبيقات (API) المتأثرة، مما قد يتيح تنفيذ أوامر تعسفية على الجهاز ورفع مستوى الامتيازات. يرجى ملاحظة أنه لاستغلال هذه الثغرة بنجاح، يجب أن يمتلك المهاجم بيانات اعتماد إدارية صالحة للقراءة فقط.

Name of the Vulnerable Software and Affected Versions: PAN-OS (affected versions not specified) Description: A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker-controlled server. This attack requires network access to the firewall management interface. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a lack of protection for the web page structure in the Cisco ISE web-based management interface, allowing for a potential cross-site scripting (XSS) attack. An authenticated, remote attacker could exploit this to conduct an XSS attack against a user of the web-based management interface of an affected device.

A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. This issue is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. To exploit this vulnerability, an attacker must have valid Administrator-level privileges on the affected device.

A vulnerability in the web-based management interface of the affected software could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This issue exists because the software does not properly validate HTTP requests, such as those sent to `/api` endpoints, allowing an attacker to exploit the vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to delete arbitrary files from the affected system.

The issue exists due to insufficient file permission restrictions, allowing an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. An attacker could exploit this by sending a crafted command from the API to the application. The attacker would need valid user credentials to exploit this issue.

A vulnerability in the web-based management interface of the affected systems could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This issue exists because the interface does not properly validate user-supplied input. An attacker could exploit this by persuading a user to click a crafted link, potentially allowing the attacker to execute arbitrary script code or access sensitive browser-based information.

The issue is related to the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM), where the interface does not properly validate user-supplied input. This could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The attacker could exploit this by persuading a user to click a crafted link, potentially allowing the execution of arbitrary script code in the context of the affected interface or access to sensitive, browser-based information.

A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authenticated network-based attacker to mislead another authenticated PAN-OS administrator to click on a specially crafted link that performs arbitrary actions in the PAN-OS web interface as the targeted authenticated administrator.

An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system and send a specifically crafted request to the firewall that causes the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.