Description: CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Solutions
The recommended resolution for all issues documented above is to upgrade to the version indicated below at your earliest convenience.
* 17.2 Upgrade
Configurations
If the NGFW has one or more Report application Report Users with Online Access enabled they are vulnerable.
To access this information:
* As the NGFW administrator, log into the UI and navigate to the Reports application.
The above picture shows the configuration panel for user access. The “reportuser@domain.com” user has “Online Access” checked, which is required in order to be vulnerable.
Workarounds
For the Reports application, for all Reports Users, disable Online Access.
To do this:
* As the NGFW administrator, log into the UI and go to the Reports application.
* For all users with the Online Access checkbox (red box) enabled, uncheck it.
* Click Save.