SecPod Cyber Bulletin 33rd Issue

[saanidhyadwivedi]

1. Trellix Enterprise Security Manager Flaw

A security flaw (CVE-2023-38545) in Trellix Enterprise Security Manager has been discovered, potentially exposing sensitive enterprise data.

CVSS Score: 9.8

2. IBM Security Verify Vulnerabilities

IBM’s Security Verify platform has been found with various vulnerabilities(CVE-2024-49803, CVE-2024-49804, CVE-2024-49805 & CVE-2024-49806) that could compromise authentication processes.

CVSS Score: 9.8, 9.4, 9.4 & 7.8

3. Apple Safari Remote Code Execution Vulnerability

A critical remote code execution vulnerability (CVE-2024-44308) in Apple Safari, identified as CVE-2024-44308, has been discovered and actively exploited in the wild.

CVSS Score: 8.8

4. Windows Driver Use-After-Free Vulnerability

A serious use-after-free vulnerability (CVE-2024-49039) in a Windows driver has been disclosed, which could lead to privilege escalation or system compromise if exploited.

CVSS Score: 8.8

5. HPE IceWall Products Vulnerability

Hewlett Packard Enterprise (HPE) has identified a security vulnerability (CVE-2024-11856) in its IceWall products, which could be exploited by attackers to gain unauthorized access.

CVSS Score: 3.7

[Author]

Posts