Fidelissecurity vulnerabilities
We track 9 vulnerabilities in Fidelissecurity products across 2 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on May 17, 2022.
Latest Fidelissecurity vulnerabilities
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to exec
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to exe
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to execute sy
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are ava
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components.
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The v
- 8.8 High severity
Fidelis Network: Improper Neutralization of Special Elements used in a Command
Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnera
- 7.8 High severity
Fidelis Network: Incorrect Default Permissions
Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run
- 7.8 High severity
Fidelis Network: Incorrect Default Permissions
Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to