Baha Doumi

Name of the Vulnerable Software and Affected Versions: IBM QRadar SOAR Plugin App versions 1.0.0 through 5.6.0 Description: The IBM QRadar SOAR Plugin App may allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (`/../`) to view arbitrary files on the system. Recommendations: IBM QRadar SOAR Plugin App version 5.6.0 and earlier: Update to a newer version to address the directory traversal issue. IBM QRadar SOAR Plugin App versions 1.0.0 through 5.6.0: Sanitize user-supplied input in URL requests to prevent the injection of “dot dot” sequences (`/../`). IBM QRadar SOAR Plugin App versions 1.0.0 through 5.6.0: Implement strict input validation to filter out potentially malicious characters and patterns in URL requests.

**Name of the Vulnerable Software and Affected Versions** Chamilo LMS version 1.11.26 **Description** The issue is related to Incorrect Access Control, allowing non-admin users to manipulate sensitive profile information via the "main/auth/profile" endpoint. This poses a significant risk to data integrity. **Recommendations** For Chamilo LMS version 1.11.26, update to a newer version that contains a fix for this issue to prevent potential data exposure or unauthorized access. As a temporary workaround, consider restricting access to the "main/auth/profile" endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Chamilo LMS version 1.11.26 **Description** A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge. The vulnerability is located in the "/main/social/home.php" page. **Recommendations** For Chamilo LMS version 1.11.26, as a temporary workaround, consider disabling access to the "/main/social/home.php" page until a patch is available. Restrict the ability to post on the social wall to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Chamilo LMS version 1.11.26 **Description** The issue is related to Incorrect Access Control, allowing a non-authenticated attacker to request sensitive information. Specifically, an attacker can access the number of messages and the number of online users via "/main/inc/ajax/message.ajax.php?a=get count message" and "/main/inc/ajax/online.ajax.php?a=get users online". This exposes sensitive data locally. **Recommendations** For Chamilo LMS version 1.11.26, patch immediately to mitigate risks. As a temporary workaround, consider restricting access to the vulnerable API endpoints "/main/inc/ajax/message.ajax.php" and "/main/inc/ajax/online.ajax.php" to minimize the risk of exploitation.