Francesco Oddo

**Name of the Vulnerable Software and Affected Versions** Riverbed SteelCentral NetProfiler and NetExpress version 10.8.7 **Description** An authenticated multi-stage remote code execution issue exists. A SQL injection vulnerability in the `/api/common/1.0/login` endpoint can be exploited to create a new user account in the appliance database. This user can then trigger a command injection vulnerability in the `/index.php?page=licenses` endpoint to execute arbitrary commands. An insecure sudoers configuration allows the `mazu` user to execute arbitrary commands as root via SSH key extraction and command chaining, potentially leading to full remote root access to the virtual appliance. **Recommendations** Apply mitigations to prevent SQL injection in the `/api/common/1.0/login` endpoint. Address the command injection vulnerability in the `/index.php?page=licenses` endpoint. Secure the sudoers configuration to prevent the `mazu` user from executing arbitrary commands as root.

**Name of the Vulnerable Software and Affected Versions** Apache CouchDB versions prior to 1.7.2 Apache CouchDB versions prior to 2.1.2 **Description** Administrative users can configure the database server via HTTP(S). Insufficient validation of configuration settings provided through the HTTP API allows an administrator to bypass the blacklist of restricted settings. This enables the user to escalate privileges to the level of the operating system user running the service, resulting in arbitrary remote code execution. **Recommendations** Upgrade to version 1.7.2. Upgrade to version 2.1.2.