Frank Lycops

يوجد خلل في مخطط التفويض يسمح للمستخدمين ذوي الصلاحيات المنخفضة بالوصول إلى معلومات تتجاوز أذوناتهم المحددة وتعديلها.

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.

يتعرض برنامج Tanium Client لحالة رفض الخدمة. تسمح هذه الثغرة الأمنية بحدوث رفض الخدمة.

يوجد في Tanium Threat Response مشكلة تتعلق بتسريب المعلومات.

توجد ثغرة تتعلق بعدم صحة التحقق من صحة المدخلات في Tanium Appliance.

يحتوي برنامج Tanium Threat Response على ثغرة تتعلق بتسريب المعلومات. تسمح هذه الثغرة باحتمال الكشف عن المعلومات.

يعاني برنامج Tanium Threat Response من مشكلة تتعلق بتسرب المعلومات. تسمح هذه الثغرة بإمكانية الكشف عن المعلومات.

The issue is related to a lack of protection for the web page structure in the Search/Node Information Section component of the SolarWinds Platform user interface. This allows a remote attacker to conduct cross-site scripting (XSS) attacks. The vulnerability requires authentication and user interaction.

A local file deletion issue in the software enables an authenticated administrator to delete files from the local file system with elevated privileges. These files can include logs and system components that impact the integrity and availability of the software.

The issue allows remote attackers to cause a denial of service, create arbitrary users, or possibly have other unspecified impacts via a crafted request to the "/upnpisapi" endpoint, specifically by using the "beckhoff.com:service:cxconfig:1#Write" SOAP action.