Francesco Oddo

**Name of the Vulnerable Software and Affected Versions** Riverbed SteelCentral NetProfiler and NetExpress version 10.8.7 **Description** An authenticated multi-stage remote code execution issue exists. A SQL injection vulnerability in the `/api/common/1.0/login` endpoint can be exploited to create a new user account in the appliance database. This user can then trigger a command injection vulnerability in the `/index.php?page=licenses` endpoint to execute arbitrary commands. An insecure sudoers configuration allows the `mazu` user to execute arbitrary commands as root via SSH key extraction and command chaining, potentially leading to full remote root access to the virtual appliance. **Recommendations** Apply mitigations to prevent SQL injection in the `/api/common/1.0/login` endpoint. Address the command injection vulnerability in the `/index.php?page=licenses` endpoint. Secure the sudoers configuration to prevent the `mazu` user from executing arbitrary commands as root.

Name of the Vulnerable Software and Affected Versions: Apache CouchDB versions prior to 1.7.2 Apache CouchDB versions prior to 2.1.2 Description: The issue allows an existing CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under. This is due to insufficient validation of administrator-supplied configuration settings via the HTTP API, enabling the bypassing of the blacklist of configuration settings that are not allowed to be modified via the HTTP API. As a result, an existing CouchDB admin user can gain arbitrary remote code execution. Recommendations: For Apache CouchDB versions prior to 1.7.2, upgrade to release 1.7.2. For Apache CouchDB versions prior to 2.1.2, upgrade to release 2.1.2.