InfoSecBulletin Cybersecurity for mankind
IBM revealed several critical vulnerabilities in its Security Verify Access Appliance, which could pose serious security risks to users identified as (CVE-2024-49803, CVE-2024-49804, CVE-2024-49805, CVE-2024-49806). These vulnerabilities affect versions 10.0.0 – 10.0.8 IF1.
CVE-2024-49803 is a critical vulnerability with a CVSS score of 9.8. IBM cybersecurity researchers found that this flaw lets a remote authenticated attacker execute commands on the system by sending a tailored request.
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
The security issue arises from not properly handling special characters in operating system commands, which may allow attackers to execute unauthorized commands.
Two significant vulnerabilities, CVE-2024-49805 and CVE-2024-49806, both have a CVSS score of 9.4 and involve hard-coded credentials.
These credentials, such as passwords and keys, authenticate users, enable communication with external components, and encrypt internal data.
CVE-2024-49804 has a CVSS score of 7.8 and allows a non-administrative user with local access to escalate their privileges because of excessive permissions for certain tasks.
This vulnerability is less severe but still threatens system integrity. IBM has provided a patch, version 10.0.8-ISS-ISVA-FP0002, to fix these issues.
Users of affected IBM Security Verify Access Appliance versions should apply this patch immediately to reduce risks from vulnerabilities.
Users should remain vigilant about security issues to prevent exploitation.
