Vulnerabilities

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents.

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents.

A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges.

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no…

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.

A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter.

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only.

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions.

When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it.

A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries.

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint.

An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter.

A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation function being insufficiently restrictive.

A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.

A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.

A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.

A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.

An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.

A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter.

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges.

The server certificate was not verified when an Arc agent connected to a Guardian or CMC.

A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties.

A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter.