InfoSecBulletin Cybersecurity for mankind
Ivanti fixed a SQL Injection vulnerability in its Endpoint Management software. This vulnerability, designated as CVE-2024-37381, could have allowed authenticated attackers on the same network to run any code on affected systems.
The EPM software is used in many industries to manage different device platforms such as Windows, macOS, Chrome OS, and IoT. Ivanti quickly responded to a SQL injection flaw with a CVSS score of 8.4 (High) to protect its customers.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
Ivanti hasn’t heard of any attacks happening yet, but they want all EPM 2024 users to install the security hot patch as soon as possible. This patch will protect against potential attackers who might try to gain unauthorized access or run harmful code.
Ivanti released a Security Hot Patch for EPM 2024 flat to fix the CVE-2024-37381 flaw. Ivanti has released a Security Hot Patch for EPM 2024 to fix the CVE-2024-37381 flaw. The patch updates four DLL files on the Core Server to effectively mitigate the vulnerability.
Ivanti EPM users should install the security hot patch as a priority to protect their systems and data from potential compromise.
