Jakub Domeracki

**Name of the Vulnerable Software and Affected Versions** Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 **Description** An authenticated attacker can execute blind SQL queries—a technique used to extract information from a database by observing the application's response to specific queries—via a crafted request parameter in a legacy dashboard widget API. **Recommendations** Update to version 6.3.85.

**Name of the Vulnerable Software and Affected Versions** Google SecOps (Chronicle SOAR) versions prior to 6.3.85 **Description** Improper Privilege Management on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access. This is achieved by using a crafted internal authentication header. **Recommendations** Update to version 6.3.85.

Name of the Vulnerable Software and Affected Versions: Google SecOps SOAR Server versions prior to 6.3.54.0 Description: A path traversal flaw exists in the archive extraction component of Google SecOps SOAR Server. This allows an authenticated attacker with Use Case import permissions to achieve Remote Code Execution (RCE) by uploading a malicious ZIP archive containing path traversal sequences. Recommendations: Update Google SecOps SOAR Server to version 6.3.54.0 or later.