InfoSecBulletin Cybersecurity for mankind
IBM revealed several critical vulnerabilities in its Security Verify Access Appliance, which could pose serious security risks to users identified as (CVE-2024-49803, CVE-2024-49804, CVE-2024-49805, CVE-2024-49806). These vulnerabilities affect versions 10.0.0 – 10.0.8 IF1.
CVE-2024-49803 is a critical vulnerability with a CVSS score of 9.8. IBM cybersecurity researchers found that this flaw lets a remote authenticated attacker execute commands on the system by sending a tailored request.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
The security issue arises from not properly handling special characters in operating system commands, which may allow attackers to execute unauthorized commands.
Two significant vulnerabilities, CVE-2024-49805 and CVE-2024-49806, both have a CVSS score of 9.4 and involve hard-coded credentials.
These credentials, such as passwords and keys, authenticate users, enable communication with external components, and encrypt internal data.
CVE-2024-49804 has a CVSS score of 7.8 and allows a non-administrative user with local access to escalate their privileges because of excessive permissions for certain tasks.
This vulnerability is less severe but still threatens system integrity. IBM has provided a patch, version 10.0.8-ISS-ISVA-FP0002, to fix these issues.
Users of affected IBM Security Verify Access Appliance versions should apply this patch immediately to reduce risks from vulnerabilities.
Users should remain vigilant about security issues to prevent exploitation.
