CVE-2021-30119

RT TheHackersNews "VSA version 9.5.7a (9.5.7.2994) ships with: CVE-2021-30116 : Credentials leak & business logic flaw CVE-2021-30119 : XSS vulnerability CVE-2021-30120 : 2-factor authentication bypass" Stay up-to-date: https://t.co/m6tBp3UgeL?amp=1

Patch for #Kaseya VSA on-premises is now available: https://t.co/VQLefy0FWI?amp=1 CVE-2021-30116, CVE-2021-30119 and CVE-2021-30120 are now patched in version 9.5.7a.

NEW: CVE-2021-30119 Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7. Severity: MEDIUM https://t.co/eu3pXQqgCa?amp=1

"VSA version 9.5.7a (9.5.7.2994) ships with: CVE-2021-30116 : Credentials leak & business logic flaw CVE-2021-30119 : XSS vulnerability CVE-2021-30120 : 2-factor authentication bypass"

As promised, ⁦/KaseyaCorp⁩ released their patch tonight. The vulnerabilities impacted both the SaaS and on-prem installs and there are 3 of them: CVE-2021-30116 - Credential Leak CVE-2021-30119 - XSS vuln CVE-2021-30120 - 2FA Bypass

New post from https://t.co/uXvPWJy6tj?amp=1 (CVE-2021-30119 (vsa)) has been published on https://t.co/z9FV6a2HQt?amp=1

Alert! #Kaseya hat nur die REvil-Sicherheitslücke geschlossen. Admins sollten sofort die abgesicherte Version installieren, denn derzeit nutzen Angreifer 3 Schwachstellen (CVE-2021-30116, CVE-2021-30119, CVE-2021-30120) für den Erpressungstrojaner aus

#cybersecurity, /KaseyaCorp patches the #VSA #zeroday vulnerabilities used by #REvil. /BleepinComputer: The #cybercrime #Ransomware gang probably exploited one or a combination of CVE-2021-30116, CVE-2021-30119, and CVE-2021-30120. #infosec

ipssignatures

It is the first time for me to know a protection/signature/rule for the vulnerability CVE-2021-30119. #Sovv23rmep3rss

ipssignatures

It's new to me that Astaro has a protection/signature/rule for the vulnerability CVE-2021-30119. https://t.co/slcxHp4lZU /search?src=sprv&q=CVE-2021-30119 The vuln was published 361 days ago by NIST. #Sovv23rmep3rss