0X41C

**Nome do software vulnerável e versões afetadas** Versões do FOG anteriores à 1.5.10.41 **Descrição** O aplicativo armazena credenciais de contas de serviço em texto simples no arquivo “/opt/fog/.fogsettings”, que pode ser lido por todos os usuários no host. Isso permite que um usuário mal-intencionado explore essas credenciais, criando potencialmente novas contas para o aplicativo web e realizando outras ações maliciosas. **Recomendações** Para versões anteriores à 1.5.10.41, atualize para a versão 1.5.10.41 para resolver o problema. Como solução temporária, considere restringir o acesso ao arquivo “/opt/fog/.fogsettings” para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10.15 **Description** The issue is related to a lack of request sanitization in the logs of FOG, a free open-source cloning/imaging/rescue suite/inventory management system. This allows a malicious request containing XSS to be stored in a log file. When an administrator logs in and views the logs, they are parsed as HTML and displayed accordingly. **Recommendations** For versions prior to 1.5.10.15, update to version 1.5.10.15 to resolve the issue. As a temporary workaround, consider viewing logs from an external text editor rather than the dashboard to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10 **Description** A server-side-request-forgery (SSRF) vulnerability allowed an unauthenticated user to trigger a GET request as the server to an arbitrary endpoint and URL scheme. This also allows remote access to files visible to the Apache user group. Other impacts vary based on server configuration. **Recommendations** For versions prior to 1.5.10, update to version 1.5.10 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and configuring the server to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10 **Description** The issue affects FOG, a free open-source cloning/imaging/rescue suite/inventory management system. An endpoint intended for authenticated users to have limited enumeration abilities was accessible to unauthenticated users. This allowed unauthenticated users to discover files and their paths visible to the Apache user group. **Recommendations** For versions prior to 1.5.10, update to version 1.5.10 to resolve the issue. As a temporary workaround, consider restricting access to the affected endpoint until the patch is applied.