Manuel Feifel

**Name of the Vulnerable Software and Affected Versions** SparkView versions prior to build 1127 **Description** A path traversal issue in the RDP drive redirection component allows an attacker to read and write arbitrary files across all directories with root privileges. Depending on the implementation, this can be exploited by an unauthenticated attacker and may lead to remote code execution (RCE), which is the ability to execute arbitrary commands on a target machine over a network. **Recommendations** Update to build 1127 or later.

**Name of the Vulnerable Software and Affected Versions** Remote Spark SparkView versions prior to build 1122 **Description** An issue in the local connection check allows an attacker to bypass security restrictions and achieve arbitrary code execution as root on the server side. Depending on the implementation, this can be exploited by an unauthenticated attacker. **Recommendations** Update to build 1122 or later.

Name of the Vulnerable Software and Affected Versions Symantec Data Loss Prevention Windows Endpoint versions prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15. Description The software may be susceptible to an Elevation of Privilege issue, allowing an attacker to gain elevated access to normally protected resources. The issue involves a hardcoded OpenSSL configuration path, potentially enabling an attacker to obtain a SYSTEM shell directly within the DLP process. Recommendations Update to a version prior to 25.1 MP1. Update to a version prior to 16.1 MP2. Update to a version prior to 16.0 RU2 HF9. Update to a version prior to 16.0 RU1 MP1 HF12. Update to a version prior to 16.0 MP2 HF15.

**Name of the Vulnerable Software and Affected Versions** Topal Solutions AG Topal Finanzbuchhaltung versions prior to 11.2.12.00 **Description** A flaw exists in Topal Solutions AG Topal Finanzbuchhaltung on Windows that allows for Remote Code Execution through deserialization of untrusted data. The issue is related to .NET deserialization and allows for unauthenticated Remote Code Execution. **Recommendations** Update Topal Finanzbuchhaltung to version 11.2.12.00 or later.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Cortex XDR Agent (affected versions not specified) **Description** The issue is related to a flaw in the source confirmation mechanism of the Palo Alto Networks Cortex XDR Agent, which can be exploited to impact the system's integrity and availability. A problem with a protection mechanism in the agent on Windows devices allows a local low-privileged Windows user to disrupt some functionality of the agent, although they cannot disrupt the agent's protection mechanisms using this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Cortex XDR Agent (affected versions not specified) **Description** An issue exists in the Palo Alto Networks Cortex XDR Agent related to insecure privilege management on Windows devices. A low-privileged local Windows user can disable the agent. This could be exploited by malware to deactivate the Cortex XDR agent and then carry out malicious activities. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Defender (affected versions not specified) **Description** The issue concerns a security feature bypass in Microsoft Defender on Windows operating systems. The problem stems from errors in security configurations. Exploitation may allow an attacker to circumvent existing security restrictions using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Cortex XDR Agent versions (affected versions not specified) **Description** A flaw exists in the protection mechanism of the Cortex XDR agent for Windows devices. This issue allows a local user to disable the agent. The incorrect handling of exception states is implicated in this behavior. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.