InfoSecBulletin Cybersecurity for mankind
Ivanti fixed a SQL Injection vulnerability in its Endpoint Management software. This vulnerability, designated as CVE-2024-37381, could have allowed authenticated attackers on the same network to run any code on affected systems.
The EPM software is used in many industries to manage different device platforms such as Windows, macOS, Chrome OS, and IoT. Ivanti quickly responded to a SQL injection flaw with a CVSS score of 8.4 (High) to protect its customers.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
Ivanti hasn’t heard of any attacks happening yet, but they want all EPM 2024 users to install the security hot patch as soon as possible. This patch will protect against potential attackers who might try to gain unauthorized access or run harmful code.
Ivanti released a Security Hot Patch for EPM 2024 flat to fix the CVE-2024-37381 flaw. Ivanti has released a Security Hot Patch for EPM 2024 to fix the CVE-2024-37381 flaw. The patch updates four DLL files on the Core Server to effectively mitigate the vulnerability.
Ivanti EPM users should install the security hot patch as a priority to protect their systems and data from potential compromise.
