ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Nov 21, 2023

    Critical Information Disclosure Vulnerability in ownCloud GraphAPI

    A significant information disclosure vulnerability has been identified in the ownCloud GraphAPI, potentially exposing sensitive configuration details.

    What changed

    A vulnerability has been discovered in the ownCloud GraphAPI that affects versions 0.2.x prior to 0.2.1 and 0.3.x prior to 0.3.1. This issue arises from the reliance on a third-party library, GetPhpInfo.php, which can expose sensitive configuration details when accessed.

    • The vulnerability reveals environment variables of the web server.
    • Sensitive data such as admin passwords and mail server credentials may be disclosed.
    • Disabling the GraphAPI app does not mitigate the risk.

    Who is affected

    Various users and organizations utilizing ownCloud are at risk due to this vulnerability. The following groups should take note of the potential exposure.

    • Users of ownCloud versions 0.2.x before 0.2.1.
    • Users of ownCloud versions 0.3.x before 0.3.1.
    • Organizations deploying ownCloud in containerized environments.
    • Administrators managing sensitive configurations within ownCloud.

    What to do

    To safeguard against this vulnerability, it is crucial for affected users to take immediate action. Updating to the latest versions is essential.

    • Upgrade to ownCloud GraphAPI version 0.2.1 or 0.3.1 and above.
    • Review and secure environment variables to prevent exposure.
    • Monitor access to the GetPhpInfo.php library and restrict its usage.
    • Consider implementing additional security measures to protect sensitive data.

  2. Research · Nov 15, 2023

    Critical HTTP Tunneling Vulnerability Discovered in Qlik Sense

    A significant vulnerability in Qlik Sense allows unauthenticated remote code execution, posing serious risks to users who have not updated their systems.

    What changed

    A critical vulnerability has been identified in Qlik Sense that permits unauthenticated remote code execution through improper validation of HTTP headers. This flaw enables attackers to manipulate HTTP requests, potentially leading to unauthorized access and control over backend servers.

    • The vulnerability is tracked under CVE-2023-41265.
    • It affects various versions of Qlik Sense Enterprise for Windows released before August 2023 Patch 2.
    • The issue stems from an incomplete fix for a previously reported vulnerability.

    Who is affected

    Organizations using Qlik Sense Enterprise for Windows should be particularly vigilant, as they are at risk of exploitation due to this vulnerability. It is crucial for users to ensure they are operating on the latest patched versions to mitigate potential threats.

    • Qlik Sense Enterprise for Windows users prior to August 2023 Patch 2.
    • Businesses relying on Qlik for data analytics and reporting.
    • IT departments managing Qlik Sense installations across various sectors.

    What to do

    To protect against this vulnerability, users should promptly update their Qlik Sense installations to the latest patched versions. Regularly monitoring for security updates and applying them is essential to safeguard against potential exploits.

    • Upgrade to August 2023 Patch 2 or any of the previously mentioned patches.
    • Review security practices related to HTTP header validation.
    • Conduct a security audit to assess potential exposure to this vulnerability.