Unsafe deserialization of untrusted JSON allows execution...
High severity
Unreviewed
Published
Sep 27, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Sep 27, 2023
Published to the GitHub Advisory Database
Sep 27, 2023
Last updated
Apr 4, 2024
Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoint. An attacker can leverage this vulnerability to execute code in the context of the PCE’s operating system user.
References