EUVD-2023-57520

Malicious code in bioql PyPI...

Deserialization of untrusted data

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the networktraffic API endpoint. An attacker can leverage this vulnerability to execute...

Illumio PCE Code Issue Vulnerability

Illumio PCE is a computational engine from Illumio, Inc. Illumio PCE suffers from a security vulnerability that stems from the unsafe deserialization of untrusted JSON in the networktraffic API endpoint, which can be exploited by an attacker to execute code in the context of a user of the PCE...

CVE-2023-5183 Authenticated RCE due to unsafe JSON deserialization

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the networktraffic API endpoint. An attacker can leverage this vulnerability to execute...

CVE-2023-5183 Authenticated RCE due to unsafe JSON deserialization

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the networktraffic API endpoint. An attacker can leverage this vulnerability to execute...

CVE-2023-5183

Summary: CVE-2023-5183 describes an unsafe deserialization of untrusted JSON in Illumio PCE’s network_traffic API that can lead to remote code execution. An attacker must authenticate to exploit this vulnerability and can execute code with the PCE operating system user privileges. The vulnerabili...

PT-2023-31897 · Illumio · Illumio Pce

Name of the Vulnerable Software and Affected Versions: Illumio PCE affected versions not specified Description: The issue is related to unsafe deserialization of untrusted JSON, which allows execution of arbitrary code on affected releases of the Illumio PCE. To exploit this, authentication to th...