CVE-2023-30806

概要

参考情報

• aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4 · Product
• labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition · Exploit
• vulncheck.com/advisories/sangfor-ngaf-sessid-rce · Third Party Advisory

next-gen application firewall のその他の脆弱性

• CVE-2023-30805緊急 9.8The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote …
• CVE-2023-30804中 6.5The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and a…
• CVE-2023-30803緊急 9.8The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthent…
• CVE-2023-30802中 5.3The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthent…