Segyeong

**Name of the Vulnerable Software and Affected Versions** Genian NAC/ZTNA policy server (affected versions not specified) **Description** Insufficient authentication and access control on the internal-only IPC SOAP endpoint allows an unauthenticated attacker to invoke internal functions. SOAP (Simple Object Access Protocol) is a messaging protocol specification for exchanging structured information in the implementation of web services. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code