InfoSecBulletin Cybersecurity for mankind
IBM revealed several critical vulnerabilities in its Security Verify Access Appliance, which could pose serious security risks to users identified as (CVE-2024-49803, CVE-2024-49804, CVE-2024-49805, CVE-2024-49806). These vulnerabilities affect versions 10.0.0 – 10.0.8 IF1.
CVE-2024-49803 is a critical vulnerability with a CVSS score of 9.8. IBM cybersecurity researchers found that this flaw lets a remote authenticated attacker execute commands on the system by sending a tailored request.
India releases draft Digital Personal Data Protection Rules
Microsoft to invest $80 Billion in AI Data Center
3.3 Million Email Server Expose User Passwords and Messages in Plain Text
Memory-Dump-UEFI
Researcher dumping memory to bypass BitLocker on Windows 11
CVE-2024-49112
PoC Exploit Released for Zero-Click vulnerability in Windows
Financial Threat Assessment 2024
BCSI marks Bangladeshi 28 banks high, 10 medium for cyber attack
Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster
US Treasury says it was hacked by China via third party: Beijing denies
PoC Exploited Released for Oracle Weblogic Server Vul
Microsoft warn dev urgently to update .NET installer link
The security issue arises from not properly handling special characters in operating system commands, which may allow attackers to execute unauthorized commands.
Two significant vulnerabilities, CVE-2024-49805 and CVE-2024-49806, both have a CVSS score of 9.4 and involve hard-coded credentials.
These credentials, such as passwords and keys, authenticate users, enable communication with external components, and encrypt internal data.
CVE-2024-49804 has a CVSS score of 7.8 and allows a non-administrative user with local access to escalate their privileges because of excessive permissions for certain tasks.
This vulnerability is less severe but still threatens system integrity. IBM has provided a patch, version 10.0.8-ISS-ISVA-FP0002, to fix these issues.
Users of affected IBM Security Verify Access Appliance versions should apply this patch immediately to reduce risks from vulnerabilities.
Users should remain vigilant about security issues to prevent exploitation.
