Jakub Palaczynski

An information exposure through log file issue exists in the Palo Alto Networks Prisma Cloud Compute Console, where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute.

The issue allows an authenticated Metasys user to gain unintended access to the server file system. This can be achieved by sending specifically crafted web messages to the Metasys system, potentially enabling the user to access or modify system files.

The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management, but successful attacks require human interaction from a person other than the attacker. This can result in unauthorized creation, deletion, or modification access to critical data or all Hyperion Lifecycle Management accessible data.

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c Description: The issue is related to insufficient input validation in the SQL Developer Install component of Oracle Database Server. This vulnerability can be easily exploited by a low-privileged attacker with Client Computer User Account privilege and logon to the infrastructure where SQL Developer Install executes. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized read access to a subset of SQL Developer Install accessible data. Recommendations: For versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A XSS issue was found, allowing malicious scripts to be injected into the UI through actions by an unaware authenticated user, specifically in Firefox, with no occurrence in other browsers.

The issue is related to improper permissions in the software, which may allow an authenticated user to execute code at an elevated level of privilege. This is due to errors in using standard permissions. Exploitation of the issue could allow an attacker to execute arbitrary code.

The issue is related to improper file verification, which may allow an authenticated user to potentially enable escalation of privilege via local access. It is also associated with errors in permission handling, potentially allowing an attacker to elevate their privileges.

The issue allows a local attacker to potentially cause Denial of Service to the client by replacing a DLL file with a malicious one, due to the DLLs being loaded from directories where all users have write permissions.

A local attacker can gain higher privileges to files with limited access by creating a hard-link from the log file of Check Point ZoneAlarm to any file on the system, resulting in permission changes that allow all users to access the linked file.

A cross-site scripting (XSS) issue was discovered. This allows users with object creation capabilities to attack other privileged users.

The issue arises because Apache HTTP Server logs are displayed, leading to a potential XSS problem.

The issue allows credentials disclosure.

The issue is caused by insecure deserialization of a specially crafted serialized object, which allows attackers to potentially execute arbitrary code. This can be exploited by a remote attacker using a specially formed serialized object, potentially leading to the execution of arbitrary code.

The issue is related to an XXE injection vulnerability due to the configuration of the XML parser shipped with the product. This vulnerability may occur when XML input containing a reference to an external entity is processed by an affected XML parser, potentially allowing attackers to gain unauthorized access to files containing sensitive information or cause denial-of-service.

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Description: An issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting attacks, potentially enabling them to read unauthorized content, use the victim's identity to take actions on the site, and inject malicious content into the user's browser. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote authenticated users with certain privileges to read arbitrary files. This can be achieved via the `ntpclientcounterlogfile` parameter to "cgi-bin/mainv2" or through vectors involving `curl` support of the "file" schema in the firmware update functionality.

The issue concerns a directory traversal vulnerability in the "Upload Groupkey" functionality of the Web Configuration Utility. This vulnerability allows remote authenticated users with Admin-User access to write to arbitrary files, potentially leading to gaining root privileges. This can be achieved by uploading a file to a sensitive directory, such as the cron.d directory.

The issue allows remote attackers to read arbitrary files due to a failure in restricting URL access in the Web Configuration Utility.

The issue is related to an XML external entity (XXE) vulnerability in the web interface of OpenText Documentum Webtop. This vulnerability can be exploited by a remote attacker to read arbitrary files, cause a denial of service, or obtain user hashes on Windows systems. The exploitation involves crafted XML structures, such as a crafted DTD, in requests to specific API endpoints like `xda/com/documentum/ucf/server/transport/impl/GAIRConnector`, or through the import or check-in of crafted XML files in a MediaProfile file.

The issue is related to incorrect restriction of XML external entities (XXE) in the OpenText Documentum Administrator. This can be exploited by a remote attacker to read arbitrary files, cause a denial of service, or obtain user hashes on Windows systems. The exploitation involves crafted XML structures, such as a DTD, in requests to specific API endpoints like `xda/com/documentum/ucf/server/transport/impl/GAIRConnector`, or through the import or check-in of crafted XML files in a MediaProfile file.