InfoSecBulletin Cybersecurity for mankind
IBM revealed several critical vulnerabilities in its Security Verify Access Appliance, which could pose serious security risks to users identified as (CVE-2024-49803, CVE-2024-49804, CVE-2024-49805, CVE-2024-49806). These vulnerabilities affect versions 10.0.0 – 10.0.8 IF1.
CVE-2024-49803 is a critical vulnerability with a CVSS score of 9.8. IBM cybersecurity researchers found that this flaw lets a remote authenticated attacker execute commands on the system by sending a tailored request.
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
The security issue arises from not properly handling special characters in operating system commands, which may allow attackers to execute unauthorized commands.
Two significant vulnerabilities, CVE-2024-49805 and CVE-2024-49806, both have a CVSS score of 9.4 and involve hard-coded credentials.
These credentials, such as passwords and keys, authenticate users, enable communication with external components, and encrypt internal data.
CVE-2024-49804 has a CVSS score of 7.8 and allows a non-administrative user with local access to escalate their privileges because of excessive permissions for certain tasks.
This vulnerability is less severe but still threatens system integrity. IBM has provided a patch, version 10.0.8-ISS-ISVA-FP0002, to fix these issues.
Users of affected IBM Security Verify Access Appliance versions should apply this patch immediately to reduce risks from vulnerabilities.
Users should remain vigilant about security issues to prevent exploitation.
