Peter Lapp

**Name of the Vulnerable Software and Affected Versions** HPE Connected Backup versions 8.6 through 8.8.6 **Description** A potential security issue has been identified that could be exploited locally to allow escalation of privilege. **Recommendations** For HPE Connected Backup versions 8.6 through 8.8.6, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** AlienVault OSSIM versions prior to 5.3.1 USM versions prior to 5.3.1 **Description** The issue allows remote attackers to bypass authentication, potentially obtaining sensitive information, modifying the application, or executing arbitrary code as root. This is achieved via a specific "AV Report Scheduler" HTTP User-Agent header. **Recommendations** For AlienVault OSSIM versions prior to 5.3.1, update to version 5.3.1 or later to resolve the issue. For USM versions prior to 5.3.1, update to version 5.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `logcheck` function in `session.inc` until a patch is available.

**Name of the Vulnerable Software and Affected Versions** AlienVault OSSIM and USM versions prior to 5.3.2 **Description** The issue allows for arbitrary PHP code execution via magic methods in included classes, which can be exploited through PHP object injection vulnerabilities found in multiple widget files. **Recommendations** For versions prior to 5.3.2, update to version 5.3.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AlienVault OSSIM and USM versions prior to 5.3.2 **Description** A persistent XSS issue exists in the login process, specifically in the User-Agent header, allowing an attacker to steal session IDs of logged-in users when an administrator views current sessions. **Recommendations** For versions prior to 5.3.2, update to version 5.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the login process and session viewing functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** AlienVault OSSIM and USM versions prior to 5.3.2 **Description** A vulnerability exists that allows an attacker to execute an arbitrary SQL query, potentially leading to the retrieval of database information or the reading of local system files via MySQL's LOAD FILE. **Recommendations** For versions prior to 5.3.2, update to version 5.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the gauge.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** F5 BIG-IP Application Security Manager (ASM) versions prior to 11.6 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account. This occurs because the Response Body field does not properly sanitize user input, enabling an attacker to execute malicious scripts. **Recommendations** For versions prior to 11.6, update to version 11.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the user account creation feature until the update is applied.