CVE-2024-45316

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack...

CVE-2024-45316

Summary: CVE-2024-45316 affects SonicWall Connect Tunnel Windows client (12.4.3.271 and earlier). The root cause is an improper link-resolution-before-file-access vulnerability (Link Following) that lets users with standard privileges delete arbitrary folders/files, potentially resulting in local...

CVE-2024-45316

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack...

CVE-2024-45315

CVE-2024-45315 : SonicWall Connect Tunnel Windows client versions 12.4.3.271 and earlier are vulnerable to an improper link resolution before file access (“Link Following”). This allows users with standard privileges to create arbitrary folders and files, potentially causing a local Denial of Ser...

CVE-2024-45315

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service DoS attack...

CVE-2024-45315

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service DoS attack...

Vulnerabilities fixed in Ivanti Connect Secure and Policy Secure

Ivanti has fixed a vulnerability in Connect Secure and Policy Secure. UPDATE: POC code is now available online for this vulnerability. An authenticated malicious person with access to the admin portal of Connect Secure or Policy Secure can exploit the vulnerability to execute code remotely. Ivant...

SonicWALL Connect Tunnel 后置链接漏洞

SonicWALL Connect Tunnel is a remote software from SonicWALL USA. A backlink vulnerability exists in SonicWALL Connect Tunnel version 12.4.3.271 and earlier, which stems from the presence of a File Access Before Link Resolution Incorrect vulnerability that allows users with standard privileges to...

SonicWALL Connect Tunnel 后置链接漏洞

SonicWALL Connect Tunnel is a remote software from SonicWALL USA. A backlink vulnerability exists in SonicWALL Connect Tunnel version 12.4.3.271 and prior versions, which stems from the presence of an incorrect link resolution before file access vulnerability that could allow a user with standard...

SonicWALL Connect Tunnel Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWALL Connect Tunnel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Secure...

Ivanti Connect Secure 9.1Rx < 9.1R18.9 / 22.x < 22.7R2.1 RCE

The Ivanti Connect Secure installed on the remote host is 9.1Rx prior to 9.1R18.9, 22.x prior to 22.7R2.1. It is, therefore, affected by a remote code execution vulnerability due to improper input validation in the admin portal. Note that Nessus has not tested for this issue but has instead relie...

PT-2024-38981

Name of the Vulnerable Software and Affected Versions: Eclipse Mosquitto versions up to 2.0.18a Description: The issue allows an attacker to cause memory leaking, segmentation fault, or heap-use-after-free by sending specific sequences of packets, including "CONNECT", "DISCONNECT", "SUBSCRIBE",...

SonicWALL Connect Tunnel Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of SonicWALL Connect Tunnel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

SonicWall SSL-VPN SMA1000 and Connect Tunnel Windows Client Affected By Multiple Vulnerabilities

1 CVE-2024-45315 - SonicWALL SMA1000 Connect Tunnel Windows Client Link Following Denial-of-Service VulnerabilityThe Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard...

PT-2024-31567 · Sonicwall · Sonicwall Connect Tunnel

Name of the Vulnerable Software and Affected Versions: SonicWall Connect Tunnel versions 12.4.3.271 and earlier Description: The issue allows users with standard privileges to create arbitrary folders and files, potentially leading to a local Denial of Service DoS attack due to improper link...

PT-2024-39562 · Authd +1 · Authd +1

Name of the Vulnerable Software and Affected Versions: Authd versions 0.3.6 and earlier Description: A local attacker who can register user names could spoof another user's ID and gain their privileges due to insufficient randomization of user IDs. The issue arises from the GenerateID method, whi...

Security Advisory Ivanti Connect Secure and Policy Secure (CVE-2024-37404)

Summary Ivanti has released updates for Ivanti Connect Secure and Policy Secure which addresses a critical vulnerability. Successful exploitation could allow a remote authenticated attacker to achieve remote code execution. We are not aware of any customers being exploited by this vulnerability a...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 5.0.21 LTS, 12.0.4 LTS and 12.4.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported...

Ivanti Connect Secure Authenticated Remote Code Execution via OpenSSL CRLF Injection

This module exploits a CRLF injection vulnerability in Ivanti Connect Secure to achieve remote code execution CVE-2024-37404. Versions prior to 22.7R2.1 are vulnerable. Note that Ivanti Policy Secure versions prior to 22.7R1.1 are also vulnerable but this module doesn't support this software. Val...

Security Bulletin: IBM App Connect Enterprise toolkit is vulnerable to a local authenticated attacker due to the OKHttp component. (CVE-2023-0833).

Summary IBM App Connect Enterprise toolkit is vulnerable to a local authenticated attacker due to the OKHttp component. CVE-2023-0833. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-0833 DESCRIPTION: Red Hat AMQ-Streams could allow ...