Tobias Neitzel

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 13.10 **Description** The issue allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a `%LOCALAPPDATA%TempNcpSupport*` location. This can lead to elevated privileges and potential system compromise. **Recommendations** For versions prior to 13.10, update to version 13.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the `%LOCALAPPDATA%TempNcpSupport*` location to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 12.22 **Description** The issue is related to insecure file permissions in the Support Assistant component of the NCP Secure Enterprise Client. This allows attackers to write to configuration files from low-privileged user accounts. **Recommendations** For versions prior to 12.22, update to version 12.22 or later to resolve the issue. As a temporary workaround, consider restricting access to the configuration files to prevent low-privileged user accounts from modifying them.

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 12.22 **Description** The issue allows attackers to read registry information of the operating system by creating a symbolic link. This is possible due to a flaw in the Support Assistant component of the NCP Secure Enterprise Client. **Recommendations** For versions prior to 12.22, update to version 12.22 or later to resolve the issue. As a temporary workaround, consider restricting access to the Support Assistant component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 12.22 **Description** The issue allows attackers to read the contents of arbitrary files on the operating system by creating a symbolic link. This is related to the Support Assistant in the NCP Secure Enterprise Client. **Recommendations** For versions prior to 12.22, update to version 12.22 or later to resolve the issue. As a temporary workaround, consider restricting access to the Support Assistant feature until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 12.22 **Description** The issue allows attackers to delete arbitrary files on the operating system by creating a symbolic link. This is possible due to a flaw in the Support Assistant component of the NCP Secure Enterprise Client. **Recommendations** For versions prior to 12.22, update to version 12.22 or later to resolve the issue. As a temporary workaround, consider restricting access to the Support Assistant component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apache Karaf (affected versions not specified) **Description** The issue concerns Apache Karaf's use of Java Management Extensions (JMX) for monitoring applications and the Java runtime. JMX relies on Java serialized objects for client-server communication, and the implementation used by Apache Karaf is not protected against unauthenticated deserialization attacks. The impact of Java deserialization vulnerabilities depends on the classes available within the target's class path. Deserialization of untrusted data represents a high security risk and should be prevented. By default, Karaf uses a limited set of classes in the JMX server class path, which reduces the risk. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Net-SNMP versions prior to 5.7.3 **Description** The issue allows for Escalation of Privileges due to the following of UNIX symbolic links (symlinks). This can potentially enable a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 5.7.3, update to version 5.7.3 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NCP Secure Enterprise Client versions prior to 10.15 r47589 **Description** The issue allows for a symbolic link attack on enumusb.reg via Support Assistant. **Recommendations** For versions prior to 10.15 r47589, update to version 10.15 r47589 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** BMC Control-M/Agent version 7.0.00.000 **Description** The issue is related to an insecure file copy in the software. **Recommendations** For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BMC Control-M/Agent version 7.0.00.000 **Description** The issue allows for arbitrary file download. **Recommendations** For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BMC Control-M/Agent version 7.0.00.000 **Description** The issue is related to insecure password storage. **Recommendations** For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BMC Control-M/Agent version 7.0.00.000 **Description** The issue allows OS Command Injection. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BMC Control-M/Agent version 7.0.00.000 **Description** The issue allows OS Command Injection. There is no information about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nagios NRPE version 3.2.1 **Description** The issue is related to insufficient filtering, where the `nasty metachars` function interprets ` ` as separate characters (`` and `n`) rather than a newline sequence. This can lead to command injection. **Recommendations** For Nagios NRPE version 3.2.1, consider disabling the `nasty metachars` function as a temporary workaround until a patch is available. Restrict access to sensitive commands and parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Codiad Web IDE versions through 2.8.4 **Description** The issue allows PHP code injection. **Recommendations** For versions through 2.8.4, update to a version later than 2.8.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Nagios NRPE version 3.2.1 **Description** The issue is a Heap-Based Buffer Overflow. It occurs when a small negative number is interpreted as a large positive number during a bzero call. **Recommendations** For Nagios NRPE version 3.2.1, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Atlassian Troubleshooting and Support Tools plugin versions prior to 1.17.2 Bitbucket Server / Data Center versions prior to 6.6.0 Confluence Server / Data Center versions prior to 7.0.1 Jira Server / Data Center versions prior to 8.3.2 Crowd / Crowd Data Center versions prior to 3.6.0 Fisheye versions prior to 4.7.2 Crucible versions prior to 4.7.2 Bamboo versions prior to 6.10.2 **Description** The issue allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. **Recommendations** Update the Atlassian Troubleshooting and Support Tools plugin to version 1.17.2 or later. Update Bitbucket Server / Data Center to version 6.6.0 or later. Update Confluence Server / Data Center to version 7.0.1 or later. Update Jira Server / Data Center to version 8.3.2 or later. Update Crowd / Crowd Data Center to version 3.6.0 or later. Update Fisheye to version 4.7.2 or later. Update Crucible to version 4.7.2 or later. Update Bamboo to version 6.10.2 or later.