Robert Merget

قد تسمح ثغرة أمنية في وظيفة الانضمام إلى الاجتماع في Cisco Webex Meetings لمهاجم غير مصدق عليه، موجود بالقرب من الشبكة، بإتمام عملية الانضمام إلى الاجتماع بدلاً من المستخدم المقصود. وقد حدث ذلك بسبب مشكلات في التحقق من صحة شهادة العميل. يمكن للمهاجم استغلال هذه الثغرة من خلال مراقبة الشبكات اللاسلكية المحلية أو المجاورة بحثًا عن طلبات الدخول الصادرة عن العميل، ومحاولة مقاطعة وتكملة عملية الدخول إلى الاجتماع بصفته مستخدمًا آخر. وقد يؤدي الاستغلال الناجح لهذه الثغرة إلى تمكين المهاجم من الدخول إلى الاجتماع بصفته مستخدمًا آخر. لا يعلم فريق الاستجابة لحوادث أمن المنتجات (PSIRT) التابع لشركة سيسكو بأي استخدام ضار لهذه الثغرة الأمنية.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات خادم Apache HTTP حتى الإصدار 2.4.63 الوصف: في بعض إعدادات mod ssl، يمكن لمهاجم من نوع «man-in-the-middle» اختطاف جلسة HTTP من خلال هجوم ترقية TLS. تؤثر هذه المشكلة على الإعدادات التي تستخدم «SSLEngine optional» لتمكين ترقيات TLS. يرتبط هذا الهجوم بعدم تزامن HTTP. التوصيات: قم بالتحديث إلى الإصدار 2.4.64، الذي يلغي دعم ترقية TLS.

The issue is related to an easily exploitable vulnerability in the JSSE component of Oracle Java SE and Oracle GraalVM Enterprise Edition. This vulnerability allows an unauthenticated attacker with network access via DTLS to compromise the system, resulting in a partial denial of service. The vulnerability applies to Java deployments that load and run untrusted code, such as sandboxed Java Web Start applications or sandboxed Java applets, and rely on the Java sandbox for security.

An insufficient entropy issue, caused by the improper use of randomness sources with low entropy for RSA key pair generation, affects the web administration interface. This could allow an unauthenticated attacker to retrieve a private key by factoring the RSA modulus N in the certificate.

The issue is related to errors in privilege management within the Windows HTML Platform component of the Windows operating system. This can allow a remote attacker to bypass existing security restrictions.

An issue was discovered in the DTLS handshake implementation. Clear DTLS application data messages in epoch 0 do not produce an out-of-order error, instead, these messages are returned to the application.

The issue is related to insufficient access control in the JSSE component of Java SE, allowing an unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks can result in unauthorized update, insert, or delete access to some of Java SE's accessible data, as well as unauthorized read access to a subset of Java SE's accessible data. This issue can be exploited through sandboxed Java Web Start applications, sandboxed Java applets, or by supplying data to APIs in the specified component without using sandboxed applications or applets.

The issue is related to inadequate access control in the Consolidation Infrastructure component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker and can significantly impact additional products, potentially resulting in the takeover of Oracle Solaris.

The issue is related to a vulnerability in the Java Secure Socket Extension (JSSE) component of Oracle Java SE, which is difficult to exploit and allows an unauthenticated attacker with network access via HTTPS to compromise Java SE. This can result in unauthorized update, insert, or delete access to some of Java SE's accessible data, as well as unauthorized read access to a subset of Java SE's accessible data. The vulnerability applies to Java deployments that load and run untrusted code and rely on the Java sandbox for security. It can also be exploited by using APIs in the specified component.

The issue allows code injection if the first argument to `Shell#[]` or `Shell#test` in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method. This is due to incorrect neutralization of special elements in output used by an incoming component.