CVE-2023-41265KEV Β· OVERDUECWE-444

Qlik Sense HTTP Tunneling Vulnerability

Critical Β· published August 30, 2023

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.6. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1030
days past CISA
deadline
CVSS v3.1
9.6
EPSS
88%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 An HTTP request tunneling vulnerability lets a remote attacker elevate their privileges in Qlik Sense like a sneaky guest slipping into a restricted area at a party! πŸ”₯ Think of it as a delivery driver who’s supposed to drop off a package at a specific address but instead delivers it straight to the VIP lounge β€” unauthorized access in the blink of an eye! If exploited, this vulnerability could allow an attacker to execute unauthorized commands on the backend server, potentially leading to data breaches or even complete control over the application. That’s absolutely devastating! Imagine the chaos if malicious actors could access sensitive data or manipulate system settings at will.

Put simply

Think of it as a delivery driver who’s supposed to drop off a package at a specific address but instead delivers it straight to the VIP lounge β€” unauthorized access in the blink of an eye! This vulnerability in Qlik Sense Enterprise enables attackers to tunnel HTTP requests through raw HTTP, allowing them to bypass normal access controls and execute commands on the server.

What to do

If exploited, this vulnerability could allow an attacker to execute unauthorized commands on the backend server, potentially leading to data breaches or even complete control over the application. That’s absolutely devastating! Imagine the chaos if malicious actors could access sensitive data or manipulate system settings at will. To protect your systems, update to the August 2023 IR or appropriate patches (May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13) immediately. Conduct a thorough security audit to ensure that no unauthorized access points remain. πŸ›‘οΈ You've got this! Follow these steps, and you’ll be on your way to fortifying your defenses in no time! πŸ’ͺ✨

The record
Technical detail
CVSS v3.1
9.6 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.88215 Β· 99.8th percentile
Weakness
CWE-444 Β· Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2023-08-30T03:15Z
KEV added
2023-12-07 Β· due 2023-12-28
Affected products (36)
ProductVersionsFixed in
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
qlik/qlik_senseall versionsβ€”
References (5)
EPSS history
Timeline
  • 07 DEC 00:00Z
    Added to CISA KEV β€” remediate by Dec 28
    kev
  • 29 AUG 00:00Z
    An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and…
    cvelistv5