Oliver Matula

**Name of the Vulnerable Software and Affected Versions** PaperCut Print Deploy (affected versions not specified) **Description** PaperCut Print Deploy, an optional component integrated with PaperCut NG/MF, is susceptible to man-in-the-middle attacks if not correctly configured with a trusted certificate. Insufficient documentation regarding SSL configuration may lead to misconfiguration of the client installation, potentially exposing communication between clients and the server. **Recommendations** Use valid certificates to secure installations. Follow the updated documentation to ensure correct SSL configuration. If using private CAs or self-signed certificates, ensure the Certification Authority certificate, or the self-signed certificate if using only one, is copied to the operating system's trust store and the Java key store.

**Name of the Vulnerable Software and Affected Versions** OpenSIS Community Edition versions through 7.6 **Description** The issue is related to incorrect access controls for the file ResetUserInfo.php, allowing an unauthenticated attacker to change the password of arbitrary users. **Recommendations** For OpenSIS Community Edition versions through 7.6, consider restricting access to the ResetUserInfo.php file until a proper fix is applied. As a temporary workaround, restrict access to the vulnerable file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OpenSIS Community Edition versions prior to 7.5 **Description** The issue is a cross-site scripting (XSS) vulnerability in the SideForStudent.php file, specifically via the `modname` parameter. This allows for potential malicious script injection and execution. **Recommendations** For OpenSIS Community Edition versions prior to 7.5, update to version 7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the SideForStudent.php file or sanitizing input for the `modname` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software (affected versions not specified) **Description** The issue is related to errors in SSH key management, allowing a remote attacker to connect to the system with root privileges via IPv6. This is due to the presence of a default SSH key pair in all devices. An attacker could exploit this by opening an SSH connection via IPv6 using the extracted key materials, gaining access to the system with root privileges. The vulnerability is only exploitable over IPv6. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode versions prior to 14.1(1i) **Description** A vulnerability exists in the system shell due to incorrect symbolic link verification of directory paths, allowing an authenticated, local attacker to overwrite sensitive system files by providing crafted user input to specific symbolic link CLI commands. The attacker would need valid device credentials to exploit this issue. Successful exploitation could allow the attacker to overwrite system files that should be restricted. **Recommendations** For versions prior to 14.1(1i), update to software version 14.1(1i) to fix the vulnerability. As a temporary workaround, consider restricting access to the system shell and limiting the use of symbolic link CLI commands to minimize the risk of exploitation.