CVE-2024-2648
19.03.2024, 23:15
A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /nac/naccheck.php. The manipulation of the argument username leads to improper neutralization of data within xpath expressions. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257286 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| Vendor | Product | Version |
|---|---|---|
| netentsec | application_security_gateway | 6.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-643 - Improper Neutralization of Data within XPath Expressions ('XPath Injection')The software uses external input to dynamically construct an XPath expression used to retrieve data from an XML database, but it does not neutralize or incorrectly neutralizes that input. This allows an attacker to control the structure of the query.
- CWE-91 - XML Injection (aka Blind XPath Injection)The software does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.