deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20921
Published: 2022-08-25
Description: A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to improper authorization on specific APIs. An attacker could exploit this vulnerability by sending crafted HTTP requests. A successful exploit could allow an attacker who is authenticated with non-Administrator privileges to elevate to Administrator privileges on an affected device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs
CVE: CVE-2022-36527
Published: 2022-08-25
Description: Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jflyfox/jfinal_cms/issues/45; https://github.com/jflyfox/jfinal_cms/issues/45
CVE: CVE-2020-27796
Published: 2022-08-25
Description: A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-125
References: https://github.com/upx/upx/issues/392; https://github.com/upx/upx/issues/392
CVE: CVE-2020-27797
Published: 2022-08-25
Description: An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-763
References: https://github.com/upx/upx/issues/390; https://github.com/upx/upx/issues/390
CVE: CVE-2020-27798
Published: 2022-08-25
Description: An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-763
References: https://github.com/upx/upx/issues/396; https://github.com/upx/upx/issues/396
CVE: CVE-2020-27799
Published: 2022-08-25
Description: A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-125
References: https://github.com/upx/upx/issues/391; https://github.com/upx/upx/issues/391
CVE: CVE-2020-27800
Published: 2022-08-25
Description: A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-125
References: https://github.com/upx/upx/issues/395; https://github.com/upx/upx/issues/395
CVE: CVE-2020-27801
Published: 2022-08-25
Description: A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-125
References: https://github.com/upx/upx/issues/394; https://github.com/upx/upx/issues/394
CVE: CVE-2020-27802
Published: 2022-08-25
Description: An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-369
References: https://github.com/upx/upx/issues/393; https://github.com/upx/upx/issues/393
CVE: CVE-2021-20223
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-20224
Published: 2022-08-25
Description: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6; https://github.com/ImageMagick/ImageMagick/pull/3083; https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d
CVE: CVE-2021-23159
Published: 2022-08-25
Description: A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://access.redhat.com/security/cve/CVE-2021-23159; https://bugzilla.redhat.com/show_bug.cgi?id=1975671; https://security.archlinux.org/CVE-2021-23159
CVE: CVE-2021-23172
Published: 2022-08-25
Description: A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://access.redhat.com/security/cve/CVE-2021-23172; https://bugzilla.redhat.com/show_bug.cgi?id=1975666; https://security.archlinux.org/CVE-2021-23172
CVE: CVE-2021-23210
Published: 2022-08-25
Description: A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://access.redhat.com/security/cve/CVE-2021-23210; https://bugzilla.redhat.com/show_bug.cgi?id=1975670; https://security.archlinux.org/CVE-2021-23210
CVE: CVE-2021-33844
Published: 2022-08-25
Description: A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://access.redhat.com/security/cve/CVE-2021-33844; https://bugzilla.redhat.com/show_bug.cgi?id=1975664; https://security.archlinux.org/CVE-2021-33844
CVE: CVE-2021-35937
Published: 2022-08-25
Description: A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-59, CWE-367
References: https://access.redhat.com/security/cve/CVE-2021-35937; https://bugzilla.redhat.com/show_bug.cgi?id=1964125; https://rpm.org/wiki/Releases/4.18.0
CVE: CVE-2021-35938
Published: 2022-08-25
Description: A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://access.redhat.com/security/cve/CVE-2021-35938; https://bugzilla.redhat.com/show_bug.cgi?id=1964114; https://bugzilla.suse.com/show_bug.cgi?id=1157880
CVE: CVE-2021-3914
Published: 2022-08-25
Description: It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/security/cve/CVE-2021-3914; https://bugzilla.redhat.com/show_bug.cgi?id=2018015; https://access.redhat.com/security/cve/CVE-2021-3914
CVE: CVE-2021-3929
Published: 2022-08-25
Description: A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvme_ctrl_reset(), data structs will be freed leading to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition or, potentially, executing arbitrary code within the context of the QEMU process on the host.
CVSS Score: 8.2 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2021-3929; https://bugzilla.redhat.com/show_bug.cgi?id=2020298; https://gitlab.com/qemu-project/qemu/-/commit/736b01642d85be832385
CVE: CVE-2021-3979
Published: 2022-08-25
Description: A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327, CWE-287
References: https://access.redhat.com/security/cve/CVE-2021-3979; https://bugzilla.redhat.com/show_bug.cgi?id=2024788; https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be[PII_REDACTED]6
CVE: CVE-2021-4112
Published: 2022-08-25
Description: A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
CVSS Score: 8.8 (HIGH)
CWE: CWE-552, CWE-552
References: https://access.redhat.com/security/cve/CVE-2021-4112; https://bugzilla.redhat.com/show_bug.cgi?id=2028121; https://access.redhat.com/security/cve/CVE-2021-4112
CVE: CVE-2022-2980
Published: 2022-08-25
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/vim/vim/commit/80525751c5ce9ed82c41d83faf9ef38667bf61b1; https://huntr.dev/bounties/6e7b12a5-242c-453d-b39e-9625d563b0ea; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
CVE: CVE-2022-2982
Published: 2022-08-25
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0260.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/vim/vim/commit/d6c67629ed05aae436164eec474832daf8ba7420; https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833be; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
CVE: CVE-2022-2997
Published: 2022-08-25
Description: Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.
CVSS Score: 8.0 (HIGH)
CWE: CWE-384
References: https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1; https://huntr.dev/bounties/c09bf21b-50d2-49f0-8c92-49f6b3c358d8; https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1
CVE: CVE-2022-36698
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-10.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-10.md
CVE: CVE-2022-36699
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/manage_category.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-11.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-11.md
CVE: CVE-2022-36700
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/manage_item.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-13.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-13.md
CVE: CVE-2022-36701
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/view_item.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-12.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-12.md
CVE: CVE-2022-36703
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /stocks/manage_stockin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-14.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-14.md
CVE: CVE-2021-43329
Published: 2022-08-25
Description: A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbitrary SQL commands via the license parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.html; https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txt
CVE: CVE-2022-31269
Published: 2022-08-25
Description: Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
CVSS Score: 8.2 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html; https://eg.linkedin.com/in/omar-1-hashem; https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945c
CVE: CVE-2022-36692
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-5.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-5.md
CVE: CVE-2022-36693
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_item.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-6.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-6.md
CVE: CVE-2022-36695
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_stockin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-8.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-8.md
CVE: CVE-2022-36696
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_stockout.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-7.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-7.md
CVE: CVE-2022-36697
Published: 2022-08-25
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_waste.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-9.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-9.md
CVE: CVE-2022-36715
Published: 2022-08-25
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-9.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-9.md
CVE: CVE-2022-36716
Published: 2022-08-25
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-10.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-10.md
CVE: CVE-2022-36719
Published: 2022-08-25
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-11.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-11.md
CVE: CVE-2022-36720
Published: 2022-08-25
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-13.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-13.md
CVE: CVE-2022-36721
Published: 2022-08-25
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-12.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-12.md
CVE: CVE-2022-28747
Published: 2022-08-25
Description: Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To exploit this vulnerability, an attacker must craft and sign a serialized payload.
CVSS Score: 9.8 (CRITICAL)
References: https://s3.us-west-2.amazonaws.com/download.countertack.com/files/IDR/IDR-4.1.1-Release-Notes.pdf; https://www.gosecure.net; https://s3.us-west-2.amazonaws.com/download.countertack.com/files/IDR/IDR-4.1.1-Release-Notes.pdf
CVE: CVE-2022-31499
Published: 2022-08-25
Description: Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/167991/Nortek-Linear-eMerge-E3-Series-Command-Injection.html; https://eg.linkedin.com/in/omar-1-hashem; https://gist.github.com/omarhashem123/5f0c6f1394099b555740fdc5c7651ee2
CVE: CVE-2022-31798
Published: 2022-08-25
Description: Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-384
References: http://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html; https://eg.linkedin.com/in/omar-1-hashem; https://gist.github.com/omarhashem123/bccdcec70ab7e8f00519d56ea2e3fd79
CVE: CVE-2022-36115
Published: 2022-08-25
Description: An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for unintended functionality. An attacker can abuse the CreateProcessAutosave() method to inject their own functionality into a development process. If (upon a warning) a user decides to recover unsaved work by using the last saved version, the malicious code could enter the workflow. Should the process action stages not be fully reviewed before publishing, this could result in the malicious code being run in a production environment.
CVSS Score: 7.1 (HIGH)
References: https://blueprism.com; https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterprise; https://portal.blueprism.com/security-vulnerabilities-august-2022
CVE: CVE-2022-36116
Published: 2022-08-25
Description: An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the setValidationInfo administrative function. Removing the validation applied to newly designed processes increases the chance of successfully hiding malicious code that could be executed in a production environment.
CVSS Score: 5.3 (MEDIUM)
References: https://blueprism.com; https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterprise; https://portal.blueprism.com/security-vulnerabilities-august-2022
CVE: CVE-2022-36117
Published: 2022-08-25
Description: An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for an administrative function. If credential access is configured to be accessible by a machine or the runtime resource security group, using further reverse engineering, an attacker can spoof a known machine and request known encrypted credentials to decrypt later.
CVSS Score: 3.1 (LOW)
References: https://blueprism.com; https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterprise; https://portal.blueprism.com/security-vulnerabilities-august-2022
CVE: CVE-2022-36118
Published: 2022-08-25
Description: An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the SetProcessAttributes administrative function. Abusing this function will allow any Blue Prism user to publish, unpublish, or retire processes. Using this function, any logged-in user can change the status of a process, an action allowed only intended for users with the Edit Process permission.
CVSS Score: 5.3 (MEDIUM)
References: https://blueprism.com; https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterprise; https://portal.blueprism.com/security-vulnerabilities-august-2022