Skip To Main Content
Ravid Mazon on Muck Rack

Ravid Mazon

As seen in: Palo Alto Networks
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Ravid Mazon’s profile

Articles by Ravid Mazon

Harnessing LLMs for Automating BOLA Detection

|
By Ravid Mazon, Jay Chen
| Palo Alto Networks
Executive Summary This post presents our research on a methodology we call BOLABuster, which uses large language models (LLMs) to detect broken object level authorization (BOLA) vulnerabilities. By automating BOLA detection at scale, we will show promising results in identifying these vulnerabilities in open-source projects. BOLA is a widespread and potentially critical vulnerability in modern APIs and web applications.
Open in Who Shared Issue with article?

Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry

|
By Jay Mazon, Jay Chen, Ravid Mazon
| Palo Alto Networks
Executive Summary In a recent audit of open-source web applications, threat researchers from Unit 42 have identified a broken object-level authorization (BOLA) vulnerability that impacts Harbor versions prior to 2.9.5. Harbor is a widely used cloud-native container registry that plays a role in cloud environments by hosting container images and providing features such as role-based access control (RBAC), vulnerability scanning and image signing.
Open in Who Shared Issue with article?

AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments

|
By Ravid Mazon, Jay Chen
| Palo Alto Networks
This post is also available in: 日本語 (Japanese) Executive Summary Palo Alto Networks has been actively researching and developing security capabilities using AI. In an effort to audit web applications for Broken Object-Level Authorization (BOLA) vulnerabilities, Unit 42 researchers developed an automated BOLA detection tool leveraging GenAI. In 2023, we used our tool to test an open-source project, Easy!Appointments, and found 15 BOLA vulnerabilities.
Open in Who Shared Issue with article?

Exposing a New BOLA Vulnerability in Grafana

|
By Ravid Mazon, Jay Chen
| Palo Alto Networks
This post is also available in: 日本語 (Japanese) Executive Summary Unit 42 researchers have discovered a new Broken Object Level Authorization (BOLA) vulnerability that impacts Grafana versionsfrom 9.5.0 before 9.5.18, from 10.0.0 before 10.0.13, from 10.1.0 before 10.1.9, from 10.2.0 before 10.2.6, from 10.3.0 before 10.3.5. Grafana is a popular open-source data observability and visualization platform with over 20 million users worldwide and almost 60,000 stars on GitHub.
Open in Who Shared Issue with article?

Analyzing CVE-2023-50164: Apache Struts Path Traversal Vulnerability

|
By Ravid Mazon
| Palo Alto Networks
On December 7, 2023, Apache released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity of 9.8 that affects Apache Struts 2. The affected versions are Struts 2.0.0 - Struts 2.3.37, Struts 2.5.0 - Struts 2.5.32, Struts 6.0.0 - Struts 6.3.0. The vulnerability allows an attacker to manipulate file upload parameters to enable path traversal and upload a malicious file the attacker can then use to perform remote code execution (RCE), gaining full system control.
Open in Who Shared Issue with article?
Show More