Yassine Bengana

An issue in the application allows an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Because a hardcoded AES key (Advanced Encryption Standard, a symmetric encryption algorithm) is present within the application, this encrypted data can be decrypted to reveal email addresses and associated information in cleartext. Additionally, an attacker can cause a denial-of-service condition by enrolling multiple unauthorized devices into a tenant via MQTT (Message Queuing Telemetry Transport, a lightweight messaging protocol), which may disrupt tenant operations.

The `rules.http.paths.path` Ingress field in ingress-nginx can be exploited to inject configuration into nginx. This can result in arbitrary code execution within the ingress-nginx controller's context and potential disclosure of Secrets accessible to the controller. In a default installation, the controller has access to all Secrets cluster-wide. The vulnerability lies in the improper handling of the `rules.http.paths.path` parameter, allowing malicious configuration to be injected.

An easily exploitable issue exists in the Oracle Workflow product of Oracle E-Business Suite, specifically within the Workflow Loader component. A high-privileged attacker with network access via HTTP can compromise Oracle Workflow. Successful exploitation may lead to unauthorized access to critical data or complete access to all Oracle Workflow accessible data.

A security issue exists within the Java utils component of the Oracle Applications DBA product. A high-privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized data manipulation, deletion, or creation, and potentially complete access to all Oracle Applications DBA accessible data.

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app versions prior to 6.2.7-h3 Palo Alto Networks GlobalProtect app versions prior to 6.2.8 Palo Alto Networks GlobalProtect app version 6.3.0 Description: A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITYSYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit. Recommendations: For versions prior to 6.2.7-h3, update to version 6.2.7-h3 or later. For versions prior to 6.2.8, update to version 6.2.8 or later. For version 6.3.0, consider disabling the vulnerable privilege management mechanism until a patch is available.

Name of the Vulnerable Software and Affected Versions: GlobalProtect App on Windows devices (affected versions not specified) Description: The issue is related to a reliance on untrusted input for a security decision in the GlobalProtect app, potentially allowing a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITYSYSTEM. The GlobalProtect app on macOS, Linux, iOS, Android, Chrome OS, and the GlobalProtect UWP App are not affected. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app on Windows (affected versions not specified) Description: A remote attacker can run ActiveX controls within the context of an authenticated Windows user, enabling them to run commands as if they are a legitimate authenticated user. This issue can be exploited when the authenticated user navigates to a malicious page during the GlobalProtect SAML login process on a Windows device. Recommendations: As a temporary workaround, consider disabling the use of ActiveX controls within the GlobalProtect app on Windows until a patch is available. Restrict access to malicious web pages to minimize the risk of exploitation during the GlobalProtect SAML login process.

An unauthenticated file deletion issue in the management web interface of PAN-OS allows an attacker with network access to delete certain files, including limited logs and configuration files, but not system files, as the "nobody" user. The risk can be greatly reduced by restricting access to the management web interface to only trusted internal IP addresses. This issue does not affect Cloud NGFW or Prisma Access software.

The issue is related to a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script, potentially leading to arbitrary operations as an admin user. This could allow a remote attacker to perform certain operations in the context of an administrator user.

The issue concerns an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs.

The issue is related to insecure privilege management in VMware Aria Operations for Logs, allowing a malicious actor with non-administrative privileges and network access to the Aria Operations for Logs API to perform certain operations in the context of an admin user. This is a result of a privilege escalation issue.

The issue is related to a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration. This could allow a remote attacker to inject and execute arbitrary code in the user's browser within the context of the vulnerable web site.

The issue is related to an information disclosure vulnerability in VMware Aria Operations. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known. The vulnerability is associated with a lack of protection for service data, which could allow a remote attacker to disclose protected information.

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations (affected versions not specified) Description: The issue is related to a stored cross-site scripting vulnerability in VMware Aria Operations. A malicious actor with editing access to views may be able to inject malicious script, leading to stored cross-site scripting in the product. This could allow a remote attacker to perform cross-site scripting attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations (affected versions not specified) Description: The issue is related to a stored cross-site scripting vulnerability in VMware Aria Operations. A malicious actor with editing access to email templates could inject malicious script, leading to stored cross-site scripting in the product. This could allow a remote attacker to perform cross-site scripting attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Webex App (affected versions not specified) Description: A vulnerability in the media retrieval functionality could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This issue is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Webex App (affected versions not specified) Description: A vulnerability in the protocol handlers of the application could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue exists because the application does not safely handle file protocol handlers. An attacker could exploit this by persuading a user to follow a specially crafted link, causing the application to send requests. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture sensitive information, including credential information, from the requests. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint. Over 1.4 million results are found to be potentially affected. The vulnerability can be exploited to achieve remote code execution and privilege escalation.