Hay Mizrachi

An observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.

Improper neutralization of input during web page generation in the certificate management interface allows an authorized attacker to perform cross-site scripting (XSS), which is a technique where malicious scripts are injected into trusted websites. This can enable the attacker to conduct spoofing attacks over a network.

External control of a file name or path allows an unauthorized attacker to execute arbitrary code over a network.

Exposure of sensitive information to an unauthorized actor allows an authorized attacker to elevate privileges over a network.

The software contains a server-side request forgery (SSRF) issue. This allows an unauthorized attacker to perform spoofing over a network. The root cause is insufficient input validation. Exploitation may allow a remote attacker to conduct spoofing attacks.

An improper restriction of the communication channel to intended endpoints in Azure IoT Explorer can allow an unauthorized attacker to disclose information over a network. The issue involves insufficient limitation of the communication channel for specified endpoints. Exploitation may allow a remote attacker to reveal protected information.

A missing authentication check for a critical function in Azure IoT Explorer can allow an unauthorized attacker to disclose information over a network. The issue involves the transmission of critical information in plain text, potentially enabling a remote attacker to reveal protected information.

The software transmits sensitive information in cleartext, potentially allowing an unauthorized attacker to disclose information over a network. This impacts the confidentiality of data handled by the application.

An issue exists where binding to an unrestricted IP address in the Azure IoT SDK can allow an unauthorized attacker to disclose information over a network.

The issue allows authenticated attackers with Administrator-level access and above to make web requests to arbitrary locations originating from the web application. This can be used to query and modify information from internal services. The vulnerability is related to the `validate file()` function.

The issue is related to insufficient file path validation in the `admin log page()` function, allowing authenticated attackers with Administrator-level access and above to delete arbitrary log files on the server.

The issue allows authenticated attackers with Administrator-level access and above to read the contents of arbitrary log files on the server, which can contain sensitive information, via the `download file()` function.

The issue allows authenticated attackers with Administrator-level access and above to inject a PHP Object via deserialization of untrusted input from the `form data` parameter. This vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.

The issue is related to insufficient file path validation in the `admin log page()` function, allowing authenticated attackers with Administrator-level access and above to delete arbitrary log files on the server.

The issue allows authenticated attackers with Administrator-level access and above to make web requests to arbitrary locations originating from the web application. This can be used to query and modify information from internal services via the `validate file()` function.

The issue is related to PHP Object Injection via deserialization of untrusted input from the `form data` parameter. This allows authenticated attackers with Administrator-level access and above to inject a PHP Object. The vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code.

The issue allows authenticated attackers with Administrator-level access and above to read the contents of arbitrary log files on the server, which can contain sensitive information, via the `download file()` function.

The issue is related to PHP Object Injection via deserialization of untrusted input from the `form data` parameter. This allows authenticated attackers with Administrator-level access and above to inject a PHP Object. The vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.

The issue allows authenticated attackers with Administrator-level access and above to make web requests to arbitrary locations originating from the web application. This can be used to query and modify information from internal services. The vulnerability is related to the `validate file()` function.

The issue is related to insufficient file path validation in the `admin log page()` function, allowing authenticated attackers with Administrator-level access and above to delete arbitrary log files on the server.