PT-2024-12933 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

Qlik Sense Enterprise Multiple Vulnerabilities

The version of Qlik Sense Enterprise installed on the remote Windows host is prior August 2022 Patch 14, November 2022 prior to Patch 11, February 2023 prior to Patch 8 or May 2023 prior to Patch 4. It is, therefore, affected by multiple vulnerabilities. - An HTTP tunneling vulnerability due to...

CVE-2023-41266

creationtimestamp| type| source ---|---|--- 2023-08-30 02:17:51+00:00| seen| https://t.me/cibsecurity/69406 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30 17:55:24+00:00| seen| https://t.me/truesecator/5149 2023-12-03 17:01:28+00:00| see...

CVE-2023-41266

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...