High Risk Vulnerabilities Addressed in Big Monitoring Fabric

guest · Jan 2, 2020

High Risk Vulnerabilities Addressed in Big Monitoring Fabric
January 2, 2020
https://www.securityweek.com/high-risk-vulnerabilities-addressed-big-monitoring-fabric

Developed by Big Switch Networks, Big Monitoring Fabric is a hybrid cloud visibility and security solution designed to provide customers with the ability to monitor physical, virtual and cloud environments, all through a single dashboard.

Security researchers with Bishop Fox this week revealed that the solution is impacted by two security issues, namely a cross-site scripting (XSS) and a sensitive information disclosure flaw.
Tracked as CVE-2019-19632, the first issue resides in the /login endpoint in Big Monitoring Fabric and allows an unauthenticated attacker to submit a JavaScript XSS payload as a username during the login process.

Tracked as CVE-2019-19631, the second vulnerability would reveal valid session data for administrative users and RSA private keys, thus resulting in vertical and horizontal privilege escalation.
Once logged in, the researchers changed the default admin password, although they did not know the original password.
Click to expand...

Log in or Sign up

High Risk Vulnerabilities Addressed in Big Monitoring Fabric

guest Guest

Log in or Sign up

High Risk Vulnerabilities Addressed in Big Monitoring Fabric

guest Guest

Useful Searches