CVE-2014-8778: Code Injection

Q: Who can exploit this issue?

An attacker must be able to authenticate to the affected Checkmarx CxSAST instance. The issue is remotely exploitable by authenticated users.

Q: What access does successful exploitation provide?

Successful exploitation bypasses the CxQL sandbox protection mechanism and allows execution of arbitrary C# code.

Q: Which deployments are affected?

Checkmarx CxSAST, formerly called CxSuite, is affected in versions before 7.1.8. The provided information does not identify any configuration prerequisite beyond authenticated access.

Q: What permission assertions are involved in the bypass?

The bypass can be performed by asserting either System.Security.Permissions.PermissionState.Unrestricted or System.Security.Permissions.SecurityPermissionFlag.AllFlags.

Published Sep 16, 2015

Updated

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.Permissions.PermissionState.Unrestricted or (2) System.Security.Permissions.SecurityPermissionFlag.AllFlags permission.

Affected Software

1 affected component

Checkmarx CxSAST<=7.1.6

Event History

Sep 16, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

Who can exploit this issue?

An attacker must be able to authenticate to the affected Checkmarx CxSAST instance. The issue is remotely exploitable by authenticated users.

What access does successful exploitation provide?

Successful exploitation bypasses the CxQL sandbox protection mechanism and allows execution of arbitrary C# code.

Which deployments are affected?

Checkmarx CxSAST, formerly called CxSuite, is affected in versions before 7.1.8. The provided information does not identify any configuration prerequisite beyond authenticated access.

What permission assertions are involved in the bypass?

The bypass can be performed by asserting either System.Security.Permissions.PermissionState.Unrestricted or System.Security.Permissions.SecurityPermissionFlag.AllFlags.

CVE-2014-8778: Code Injection

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does successful exploitation provide?

Which deployments are affected?

What permission assertions are involved in the bypass?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does successful exploitation provide?

Which deployments are affected?

What permission assertions are involved in the bypass?