InfoSecBulletin Cybersecurity for mankind
CISA issued a warning about a security flaw in Apache OFBiz, an ERP system. The vulnerability is being actively exploited and has been added to CISA’s Known Exploited Vulnerabilities catalog as CVE-2024-38856.
CVE-2024-38856 is a serious security flaw in Apache OFBiz. It allows attackers to run code on a remote server without authentication. To stay safe, organizations should update to Apache OFBiz version 18.12.15 or newer.
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Bengaluru firm got ransomware attack, Hacker demanded $70,000
MITRE warns: U.S. Govt. Funding for MITRE’s CVE Ends Today
PwC exits more than a dozen countries in push to avoid scandals: FT reports
CVE-2024-38856 is a vulnerability in Apache OFBiz’s authentication mechanism. It allows unauthorized users to access functions only meant for logged-in users. By exploiting this vulnerability, attackers can run any code on compromised systems, possibly gaining full control.
SonicWall found and reported a critical vulnerability, CVE-2024-38856, in Apache OFBiz’s override view feature. This flaw allows unauthenticated attackers to access important parts of the system by sending specific requests.
Cybersecurity researchers Zeyad Azima from SecureLayer7 and Youssef Muhammad have posted a proof-of-concept (PoC) exploit code for CVE-2024-38856 on GitHub. This makes it easier for attackers to use the vulnerability in their attacks.
CISA strongly recommends that all federal agencies and organizations using Apache OFBiz update their installations to version 18.12.15 or later by September 17, 2024. Failing to apply these updates could lead to attacks and severe consequences.
