Weekly Digest: a new vulnerability is published on the National Vulnerability Database (31 items)

New vulnerabilities from the NVD: CVE-2019-19563 A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19562 An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19561 A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19560 A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19557 A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19556 An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information. Published at: November 16, 2020 at 02:15AM View on website November 16, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-10776 A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack. Published at: November 17, 2020 at 04:15AM View on website November 17, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21665 In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh. Published at: November 17, 2020 at 05:15PM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-1847 There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60. Published at: November 13, 2020 at 05:15PM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15481 An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0. Published at: November 13, 2020 at 11:15PM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15349 BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions. Published at: November 17, 2020 at 04:15AM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14389 It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have. Published at: November 17, 2020 at 04:15AM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13958 A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the document event handler and other hyperlinks require a control-click. Published at: November 17, 2020 at 06:15PM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13773 Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm_splitcollapse.aspx, /LDMS/alert_log.aspx, /LDMS/ServerList.aspx, /LDMS/frm_coremainfrm.aspx, /LDMS/frm_findfrm.aspx, /LDMS/frm_taskfrm.aspx, and /LDMS/query_browsecomp.aspx. Published at: November 16, 2020 at 06:15PM View on website November 18, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15301 SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation. Published at: November 18, 2020 at 11:15PM View on website November 19, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15300 SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document. Published at: November 19, 2020 at 12:15AM View on website November 19, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14208 SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML. Published at: November 19, 2020 at 12:15AM View on website November 19, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13799 Western Digital iNAND devices through 2020-06-03 allow Authentication Bypass via a capture-replay attack. Published at: November 19, 2020 at 12:15AM View on website November 19, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13360 An attacker can schedule a very large number of releases in the future causing a denial of service on a GitLab EE 12.10+ instance when they're all processed at once when the release date comes. This affects versions >=12.10, <13.3.9,>=13.3.9, <13.4.5,>=13.4.5, <13.5.2. Published at: November 19, 2020 at 02:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13359 The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are >=12.10, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Published at: November 19, 2020 at 02:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13356 An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain specific paths on the server. Affected versions are: >=8.8.9, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Published at: November 19, 2020 at 02:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13355 An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwrite certain specific paths on the server. Affected versions are: >=8.14, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Published at: November 19, 2020 at 02:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-12593 Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. Published at: November 19, 2020 at 01:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-12412 A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack. Published at: November 19, 2020 at 02:15AM View on website November 19, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret). Published at: November 19, 2020 at 04:15AM View on website November 19, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11831 OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1. Published at: November 19, 2020 at 06:15PM View on website November 19, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11830 QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0. Published at: November 19, 2020 at 06:15PM View on website November 19, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11829 Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493e40_200722. Published at: November 19, 2020 at 06:15PM View on website November 19, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-12510 The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions which allow every local user to modify the content. The default installation registers TcSysUI.exe for automatic execution upon log in of a user. If a less privileged user has a local account he or she can replace TcSysUI.exe. It will be executed automatically by another user during login. This is also true for users with administrative access. Consequently, a less privileged user can trick a higher privileged user into executing code he or she modified this way. By default Beckhoff’s IPCs are shipped with TwinCAT software installed this way and with just a single local user configured. Thus the vulnerability exists if further less privileged users have been added. Published at: November 19, 2020 at 08:15PM View on website November 19, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-12496 Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-control matrix on the server-side. It was found that a user with low rights can get information from endpoints that should not be available to this user. Published at: November 19, 2020 at 08:15PM View on website November 19, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-12495 Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on. Published at: November 19, 2020 at 08:15PM View on website November 19, 2020 at 09:36PM via National Vulnerability Database