Description (CNA)
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Genians, Inc / Genian NAC 5.0.75 LTS Release | affected 135823 before 148667 |
| Genians, Inc / Genian NAC 5.0.85 Release Stable | affected 147181 before 148666 |
| Genians, Inc / Genian NAC 5.0.86 Release | affected 148018 before 148665 |
| Genians, Inc / Genian ZTNA 6.0.35 LTS Release | affected 135814 before 148672 |
| Genians, Inc / Genian ZTNA 6.0.45 Release Stable | affected 147169 before 148671 |
| Genians, Inc / Genian ZTNA 6.0.46 Release | affected 148028 before 148670 |
CWE
CWE-284, CWE-306
References
- https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html
- https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95
ADP enrichment
No English description supplied.
No references supplied.