CVE-2020-11451
published 2020-04-02CVE-2020-11451: The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary…
PriorityP344high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
2.66%
83.8th percentile
The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microstrategy | microstrategy_web | <= 10.4 | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Unit42
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
blogs_unit42·2021-05-05
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
Threat Research Center
Threat Research
Cloud Cybersecurity Research
## File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
Saeed Abbasi
Published: May 5, 2021
Cloud Cybersecurity Research
Threat Research
App-ID
File transfer
Insider threats
## Executive Summary
File transfers (i.e., upload and download) are vital for organizations and their employees’ productivity. For example, file uploads are essential for expense management platforms, content management systems (CMS), instant messaging and collaboration applications and services. Employees frequently transfer files to teammates, customers and partners, and it’s typically believed that the entire transferring process is safe. However, since the COVID-19 pandemic caused employees to transition t
Unit42
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
blogs_unit42·2021-05-05
File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help
## Executive Summary
File transfers (i.e., upload and download) are vital for organizations and their employees’ productivity. For example, file uploads are essential for expense management platforms, content management systems (CMS), instant messaging and collaboration applications and services. Employees frequently transfer files to teammates, customers and partners, and it’s typically believed that the entire transferring process is safe. However, since the COVID-19 pandemic caused employees to transition to remote workspaces, it has become critical to reduce attack vectors for malicious actors by applying precise measures to guarantee an organization’s security for file transfers.
Cyberthreats involving malware begin with delivering specific malicious code to the victims. Generally,
http://packetstormsecurity.com/files/157068/MicroStrategy-Intelligence-Server-And-Web-10.4-XSS-Disclosure-SSRF-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2020/Apr/1https://community.microstrategy.com/s/article/Web-Services-Security-Vulnerabilityhttps://www.redtimmy.com/web-application-hacking/another-ssrf-another-rce-the-microstrategy-case/http://packetstormsecurity.com/files/157068/MicroStrategy-Intelligence-Server-And-Web-10.4-XSS-Disclosure-SSRF-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2020/Apr/1https://community.microstrategy.com/s/article/Web-Services-Security-Vulnerabilityhttps://www.redtimmy.com/web-application-hacking/another-ssrf-another-rce-the-microstrategy-case/
2020-04-02
Published