PT-2021-11723 · Quest · Quest Policy Authority

Published 2021-01-11 · Updated 2024-08-04 · CVE-2020-35205

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200

Description: The issue allows attackers to perform Server Side Request Forgery (SSRF) in the Web Compliance Manager component, enabling them to scan internal ports and make outbound connections via the initFile.jsp file. This affects products that are no longer supported by the maintainer.

Recommendations: For Quest Policy Authority version 8.1.2.200, as the product is no longer supported, consider disabling the initFile.jsp file or restricting access to it to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2020-35205

Affected Products

Quest Policy Authority

References · 7

• 🔥 https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications · Exploit
• 🔥 https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications · Exploit
• https://osv.dev/vulnerability/CVE-2020-35205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35205 · Security Note
• https://t.me/cibsecurity/21894 · Telegram Post
• https://t.me/cvenotify/89047 · Telegram Post
• https://t.me/cvenotify/8519 · Telegram Post