ZeroQlik: Achieving Unauthenticated Remote Code Execution via HTTP Request Tunneling and Path Traversal

Overview In an effort to safeguard our customers, we perform proactive vulnerability research with the goal of identifying zero-day vulnerabilities that are likely to impact the security of leading organizations.  Recently, we decided to take a look at Qlik Sense Enterprise, a data analytics solution similar to Tableau. The recent exploitation of vulnerabilities in the […]

The post ZeroQlik: Achieving Unauthenticated Remote Code Execution via HTTP Request Tunneling and Path Traversal appeared first on Praetorian.

analytics code code execution customers cve data data analytics enterprise http impact labs organizations path path traversal proactive qlik qlik sense remote code remote code execution request research safeguard security solution tunneling unauthenticated vulnerabilities vulnerability vulnerability research zero-day zero-day vulnerabilities