Werner Schober

**Nome do software vulnerável e versões afetadas** Dispositivos multifuncionais (MFP) Konica Minolta bizhub (versões afetadas não especificadas) **Descrição** O problema diz respeito a um navegador Chromium interno nos dispositivos multifuncionais (MFP) Konica Minolta bizhub que é executado com privilégios de acesso de root. Isso poderia potencialmente permitir acesso com privilégios elevados ao dispositivo. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Dispositivos multifuncionais (MFP) Konica Minolta bizhub anteriores a 14/04/2022 **Descrição** A vulnerabilidade permite uma fuga da sandbox. Para explorá-la, um invasor deve conectar um teclado a uma porta USB, pressionar a tecla F12 e, em seguida, sair do modo quiosque. **Recomendações** Para dispositivos MFP Konica Minolta bizhub anteriores a 14/04/2022, atualize para uma versão lançada após 14/04/2022 para resolver o problema. Como solução temporária, considere restringir o acesso físico às portas USB dos dispositivos para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** SALTO ProAccess SPACE version 5.4.3.0 **Description** An issue allows an attacker to write arbitrary content to arbitrary files. This can be used to execute arbitrary commands on the server by writing to files under the web root or creating .bat files that will be used with auto start. **Recommendations** For version 5.4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.

**Name of the Vulnerable Software and Affected Versions** SALTO ProAccess SPACE version 5.4.3.0 **Description** The issue allows Directory Traversal in the Data Export feature. **Recommendations** For version 5.4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Avaya one-X Communicator versions prior to 6.2 SP13 **Description** The issue concerns the use of weak cryptographic algorithms in the client authentication component, which could allow a local attacker to decrypt sensitive information. **Recommendations** For versions prior to 6.2 SP13, update to version 6.2 SP13 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sonatype Nexus Repository Manager versions 3.x before 3.8 **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via several parameters and fields, including: - the `repoId` or `format` parameter to the "service/siesta/healthcheck/healthCheckFileDetail/.../index.html" endpoint, - the `filename` in the "File Upload" functionality of the Staging Upload, - the `username` when creating a new user, - the IQ Server URL field in the IQ Server Connection functionality. **Recommendations** For versions 3.x before 3.8, update to version 3.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sonatype Nexus Repository Manager versions prior to 2.14.6 **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via several parameters and fields, including the `repoId` or `format` parameter to the "service/siesta/healthcheck/healthCheckFileDetail/.../index.html" endpoint, the `filename` in the "File Upload" functionality of the Staging Upload, the `username` when creating a new user, or the IQ Server URL field in the IQ Server Connection functionality. **Recommendations** For versions prior to 2.14.6, update to version 2.14.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable endpoints and functionalities, such as limiting the ability to upload files or create new users, until a patch is applied. Avoid using the vulnerable parameters, such as `repoId`, `format`, `filename`, `username`, and IQ Server URL field, in the affected functionalities until the issue is resolved.