CVE-2023-25804 (roxy-wi) | allinfosecnews.com

Web: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25804

March 15, 2023, 6:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the `/tmp` folder using a payload `../../../../../tmp/test111_dev`. This issue has been fixed in version 6.3.5.0.

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-26496 (exynos_1080_firmware, exynos_980_firmware, exynos_auto_t5123_firmware, exynos_modem_5123_firmware, exynos_modem_5300_firmware) 4 days, 11 hours ago | web.nvd.nist.gov

CVE-2023-26498 (exynos_1080_firmware, exynos_980_firmware, exynos_auto_t5123_firmware, exynos_modem_5123_firmware, exynos_modem_5300_firmware) 4 days, 12 hours ago | web.nvd.nist.gov

CVE-2023-26426 (illustrator) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-25862 (illustrator) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-25861 (illustrator) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-26358 (creative_cloud) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-25859 (illustrator) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-25860 (illustrator) 4 days, 20 hours ago | web.nvd.nist.gov

CVE-2023-22265 (experience_manager, experience_manager_cloud_service) 4 days, 20 hours ago | web.nvd.nist.gov

Splunk Engineer - Mid-Atlantic Region (Remote)

@ GuidePoint Security LLC | Remote in NC, VA, WV, MD, DC, DE, NJ, or PA

View on infosec-jobs.com

Security Compliance Analyst

@ Bandwidth | Raleigh, NC

View on infosec-jobs.com

Senior Cybersecurity Specialist - Naval Surface Warfare Center

@ Barbaricum | Crane, Indiana

View on infosec-jobs.com

Blockchain Security Researcher - Australia East

@ OpenZeppelin | Remote - Sydney

View on infosec-jobs.com

Software Engineer (Forensics Product)

@ Sysdig, Inc. | Italy (flexible)

View on infosec-jobs.com

GRC Specialist

@ Inbox Business Technologies | Islamabad, Islamabad Capital Territory, Pakistan

View on infosec-jobs.com

Cyber Security Architect

@ Supernova Technology | Chicago, Illinois

View on infosec-jobs.com

Senior Security Architect - Mid-Atlantic Region (Remote)

@ GuidePoint Security LLC | Remote in NC, VA, MD, DC, DE, NJ, or PA

View on infosec-jobs.com

Senior Cyber Threat Analyst

@ Nozomi Networks | United States, Houston, Texas

View on infosec-jobs.com

IT Security Operations Manager

@ Seldon | London, Hybrid

View on infosec-jobs.com

Cyber Risk Analyst (TS/SCI)

@ Red Gate Group | Reston, VA, United States

View on infosec-jobs.com

Director Product Security

@ Palo Alto Networks | Santa Clara, CA, United States

View on infosec-jobs.com