Harm Blankers

**اسم البرنامج المعرض للخطر والإصدارات المتأثرة** إصدارات Cisco Nexus Dashboard Fabric Controller (NDFC) الأقدم من 12.2.3 **الوصف** توجد ثغرة أمنية في تطبيق SSH الخاص بـ Cisco Nexus Dashboard Fabric Controller (NDFC) بسبب عدم كفاية التحقق من صحة مفتاح مضيف SSH. وهذا يسمح لمهاجم بعيد غير معتمد بتنفيذ هجوم من نوع «جهاز في الوسط» (MitM) على اتصالات SSH للأجهزة التي يديرها Cisco NDFC. قد يؤدي الاستغلال الناجح لهذه الثغرة إلى تمكين المهاجم من اعتراض حركة المرور والتظاهر بأنه جهاز مُدار، مما قد يؤدي إلى الاستيلاء على بيانات اعتماد المستخدم. **التوصيات** قم بتحديث Cisco Nexus Dashboard Fabric Controller (NDFC) إلى الإصدار 12.2.3 أو أحدث.

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions WMS 4.4 and before Description: The issue is related to an authentication bypass vulnerability in the Dell Wyse Management Suite, which could allow a remote attacker to cause a denial of service. A high-privileged attacker with remote access could potentially exploit this vulnerability. The vulnerability is described as an Authentication Bypass by Capture-replay. Recommendations: For versions WMS 4.4 and before, consider disabling remote access until a patch is available to prevent potential exploitation of the authentication bypass vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus Dashboard Fabric Controller (NDFC) (affected versions not specified) **Description** A vulnerability in the REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Forcepoint Web Security versions prior to 8.5.6 **Description** The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the `user agent` field in the Transaction Viewer is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, which can be exploited by any user who can route traffic through the Forcepoint Web proxy. This issue enables unauthorized attackers to execute JavaScript within the browser context of a Forcepoint administrator, thereby allowing them to perform actions on the administrator's behalf. Such a breach could lead to unauthorized access or modifications, posing a significant security risk. **Recommendations** For versions prior to 8.5.6, update to version 8.5.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the Transaction Viewer to minimize the risk of exploitation. Avoid using the `user agent` field in the Transaction Viewer until the issue is resolved.