Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(341612);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/31");

  script_cve_id(
    "CVE-2024-34459",
    "CVE-2025-6170",
    "CVE-2025-10911",
    "CVE-2025-13151",
    "CVE-2026-5450",
    "CVE-2026-6893",
    "CVE-2026-15308",
    "CVE-2026-29518",
    "CVE-2026-31790",
    "CVE-2026-33416",
    "CVE-2026-33636",
    "CVE-2026-41411",
    "CVE-2026-41838",
    "CVE-2026-41839",
    "CVE-2026-41840",
    "CVE-2026-41841",
    "CVE-2026-41842",
    "CVE-2026-41843",
    "CVE-2026-41844",
    "CVE-2026-41845",
    "CVE-2026-41846",
    "CVE-2026-41848",
    "CVE-2026-41850",
    "CVE-2026-41851",
    "CVE-2026-41852",
    "CVE-2026-41853",
    "CVE-2026-41855",
    "CVE-2026-43618",
    "CVE-2026-43964",
    "CVE-2026-44431",
    "CVE-2026-44432",
    "CVE-2026-48864",
    "CVE-2026-48962",
    "CVE-2026-49844",
    "CVE-2026-50623",
    "CVE-2026-50629",
    "CVE-2026-50630",
    "CVE-2026-50631",
    "CVE-2026-50632",
    "CVE-2026-50633",
    "CVE-2026-50634",
    "CVE-2026-50645"
  );

  script_name(english:"Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)");

  script_set_attribute(attribute:"synopsis", value:
"The Nutanix AOS host is affected by multiple vulnerabilities .");
  script_set_attribute(attribute:"description", value:
"The version of AOS installed on the remote host is prior to 7.6.0.6. It is, therefore, affected by multiple
vulnerabilities as referenced in the NXSA-AOS-7.6.0.6 advisory.

  - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter
    and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class
    instantiation, which can lead to unauthorized actions via gadget class deserialization. Affected versions:
    Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
    (CVE-2026-41855)

  - Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and
    process crash via an enhanced status code that lacks text after the third number. (CVE-2026-43964)

  - Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j
    API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through
    2.25.4 and version 2.26.0. The fix for CVE-2026-34481 did not cover all code paths: when a MapMessage
    contains a non-finite IEEE 754 value (NaN, Infinity, or -Infinity), MapMessage.asJson() emits the
    corresponding bare token. RFC 8259 does not permit these tokens, so a conformant parser rejects the
    resulting document. The defect is reachable only when both of the following conditions hold: * The
    application uses the message resolver https://logging.apache.org/log4j/2.x/manual/json-template-
    layout.html#event-template-resolver-message of JsonTemplateLayout or any other layout that relies on
    MapMessage.asJson() or MapMessage.getFormattedMessage(new String[]{JSON}). * The application logs a
    MapMessage that contains an attacker-controlled floating-point value. An attacker who can supply a non-
    finite value can cause the affected layout to emit malformed JSON, which may corrupt the enclosing log
    record or disrupt downstream log ingestion and parsing. Users are advised to upgrade to Apache Log4j API
    2.25.5 or 2.26.1, both of which emit RFC 8259-compliant JSON for non-finite values. (CVE-2026-49844)

  - An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due
    to a missing 'throw' keyword in the security context check, the introspection endpoint
    (/services/oauth2/introspect) can be accessed by any unauthenticated network attacker. However note that
    this is a safeguard only in the case that someone forgot to enable authentication on the service. Users
    are recommended to upgrade to version 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue. (CVE-2026-50623)

  - The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log
    warning messages without sanitizing control characters. This allows an attacker to inject arbitrary
    content, including fake log entries, into the server's log files. Users are recommended to upgrade to
    versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue. (CVE-2026-50629)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://portal.nutanix.com/page/documents/security-advisories/release-advisories/details?id=NXSA-AOS-7.6.0.6
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?dd83cbd0");
  script_set_attribute(attribute:"solution", value:
"Update the Nutanix AOS software to the recommended version. Before upgrading: if this cluster is registered with Prism
Central, ensure that Prism Central has been upgraded first to a compatible version. Refer to the Software Product
Interoperability page on the Nutanix portal.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-41855");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-44432");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/12/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/31");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:nutanix:aos");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nutanix_collect.nasl");
  script_require_keys("Host/Nutanix/Data/lts", "Host/Nutanix/Data/Service", "Host/Nutanix/Data/Version", "Host/Nutanix/Data/arch");

  exit(0);
}

include('vcf.inc');
include('vcf_extras.inc');

var app_info = vcf::nutanix::get_app_info();

var constraints = [
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.4', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.16', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.13', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.0.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.4', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.3.1.16', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.5.1.13', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' },
  { 'fixed_version' : '7.6.0.6', 'equal' : '7.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.6.0.6 or higher.' }
];

vcf::nutanix::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE,
    flags:{'xss':TRUE}
);