InfoSecBulletin Cybersecurity for mankind
IBM revealed several critical vulnerabilities in its Security Verify Access Appliance, which could pose serious security risks to users identified as (CVE-2024-49803, CVE-2024-49804, CVE-2024-49805, CVE-2024-49806). These vulnerabilities affect versions 10.0.0 – 10.0.8 IF1.
CVE-2024-49803 is a critical vulnerability with a CVSS score of 9.8. IBM cybersecurity researchers found that this flaw lets a remote authenticated attacker execute commands on the system by sending a tailored request.
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
The security issue arises from not properly handling special characters in operating system commands, which may allow attackers to execute unauthorized commands.
Two significant vulnerabilities, CVE-2024-49805 and CVE-2024-49806, both have a CVSS score of 9.4 and involve hard-coded credentials.
These credentials, such as passwords and keys, authenticate users, enable communication with external components, and encrypt internal data.
CVE-2024-49804 has a CVSS score of 7.8 and allows a non-administrative user with local access to escalate their privileges because of excessive permissions for certain tasks.
This vulnerability is less severe but still threatens system integrity. IBM has provided a patch, version 10.0.8-ISS-ISVA-FP0002, to fix these issues.
Users of affected IBM Security Verify Access Appliance versions should apply this patch immediately to reduce risks from vulnerabilities.
Users should remain vigilant about security issues to prevent exploitation.
