Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities

bishopfox.com | advisory | CVE-2018-17150 | #xss | #xxe | #authorization | #cache | #vulnerability-advisory | #intersystems

Summary

A Bishop Fox advisory on XSS, XXE and insufficient authorization in InterSystems Cache 2017.2.2.865.0 and 2018.1.2, where stored XSS can escalate privileges and exfiltrate data.
Published
Collected

original ↗

Related coverage

  1. SV3C L-Series HD Camera – Multiple Vulnerabilities (bishopfox.com)
  2. SolarWinds Serv-U Managed File Transfer – Insufficient Session ID Entropy (bishopfox.com)
  3. SolarWinds Serv-U Managed File Transfer – Denial of Service (bishopfox.com)
  4. Web & REST API Security Explained (aikido.dev)
  5. Deep Dive into Arista NG Firewall Vulnerabilities (bishopfox.com)
  6. Netwrix Auditor Advisory (bishopfox.com)

back