CVE-2014-8778

CRITICO 9.0CVE-2014-8778 · Published 16/09/2015 · updated 17/06/2026

In breve

CVE-2014-8778 è una vulnerabilità CRITICO (CVSS 9.0) che riguarda cxsast (checkmarx).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.3%, superiore al 88.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
cxsast checkmarx	`≤ 7.1.6`	No fix yet

Description

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.Permissions.PermissionState.Unrestricted or (2) System.Security.Permissions.SecurityPermissionFlag.AllFlags permission.

References

packetstormsecurity.com/files/133437/Checkmarx-CxQL-7.1.5-Sandbox-Bypass.html
seclists.org/fulldisclosure/2015/Sep/17 · Exploit
securityfocus.com/archive/1/536387/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free