Inc

SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that account, and prevent the intended recipient from using it until recovery.

SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.

An out-of-bounds write issue occurs due to insufficient bounds checking. Processing a maliciously crafted video file can lead to unexpected app termination. An out-of-bounds write is a condition where the program writes data past the end of the intended buffer, potentially corrupting memory.

A missing authorization issue in the public-facing VPN/ZTNA gateway allows an attacker to bypass multi-factor authentication (MFA) by manipulating a login request parameter. This could potentially grant unauthorized access to protected networks.

An authorization bypass exists in the MCP service. This issue is an instance of Authorization Bypass Through User-Controlled Key, which occurs when an application uses a user-supplied input to access a resource without properly verifying if the user is authorized to access that specific resource.

The software contains a SQL injection issue in the search functionality. Attackers can manipulate database queries through unvalidated user input. Specifically, malicious SQL code can be injected through the `search` parameter to potentially extract, modify, or access sensitive database information.

The software contains a time-based blind SQL injection issue in the admin interface. Attackers can manipulate database queries through the `id` parameter. Exploitation involves crafting malicious payloads that cause time delays, allowing extraction of sensitive database information using conditional sleep techniques.

Name of the Vulnerable Software and Affected Versions: PAN-OS versions (affected versions not specified) Description: An authenticated file deletion issue in the PAN-OS software allows an authenticated attacker with network access to the management web interface to delete certain files as the `nobody` user. This includes limited logs and configuration files but does not include system files. The attacker must have network access to the management web interface to exploit this issue. Restricting access to the management web interface to only trusted internal IP addresses can reduce the risk of this issue. This issue affects Cloud NGFW but does not affect Prisma Access software. Recommendations: As a temporary workaround, consider restricting access to the management web interface to only trusted internal IP addresses according to the recommended critical deployment guidelines. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the ping utility in FreeBSD, which reads raw IP packets from the network to process responses in the `pr pack()` function. The function reconstructs the IP header, the ICMP header, and if present, a "quoted packet," which represents the packet that generated an ICMP error. However, it fails to account for the possible presence of IP option headers following the IP header in either the response or the quoted packet, leading to a buffer overflow of up to 40 bytes when IP options are present. This can be triggered by a remote host, causing the ping program to crash. The ping process runs in a capability mode sandbox, which constrains its interaction with the rest of the system.

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4 Description: A Cross-site Scripting (XSS) issue in the web GUI allows an attacker to inject arbitrary javascript code. Recommendations: For versions prior to 9.4, update to version 9.4 or later to resolve the issue.