CVE-2023-41265—Qlik Sense HTTP Tunneling Vulnerability

漏洞名称

Qlik Sense HTTP Tunneling Vulnerability

描述

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

其他说明

• https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801
• https://nvd.nist.gov/vuln/detail/CVE-2023-41265

相关 CWE

• CWE-444