0X41C

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10.41 **Description** The application stores plaintext service account credentials in the "/opt/fog/.fogsettings" file, which is readable by all users on the host. This allows a malicious user to exploit these credentials, potentially creating new accounts for the web application and performing other malicious actions. **Recommendations** For versions prior to 1.5.10.41, update to version 1.5.10.41 to resolve the issue. As a temporary workaround, consider restricting access to the "/opt/fog/.fogsettings" file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10.15 **Description** The issue is related to a lack of request sanitization in the logs of FOG, a free open-source cloning/imaging/rescue suite/inventory management system. This allows a malicious request containing XSS to be stored in a log file. When an administrator logs in and views the logs, they are parsed as HTML and displayed accordingly. **Recommendations** For versions prior to 1.5.10.15, update to version 1.5.10.15 to resolve the issue. As a temporary workaround, consider viewing logs from an external text editor rather than the dashboard to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10 **Description** A server-side-request-forgery (SSRF) vulnerability allowed an unauthenticated user to trigger a GET request as the server to an arbitrary endpoint and URL scheme. This also allows remote access to files visible to the Apache user group. Other impacts vary based on server configuration. **Recommendations** For versions prior to 1.5.10, update to version 1.5.10 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and configuring the server to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10 **Description** The issue affects FOG, a free open-source cloning/imaging/rescue suite/inventory management system. An endpoint intended for authenticated users to have limited enumeration abilities was accessible to unauthenticated users. This allowed unauthenticated users to discover files and their paths visible to the Apache user group. **Recommendations** For versions prior to 1.5.10, update to version 1.5.10 to resolve the issue. As a temporary workaround, consider restricting access to the affected endpoint until the patch is applied.