Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Check Point is warning of a zero-day vulnerability in its Network Security gateway products that threat actors have exploited in the wild. Tracked as CVE-2024-24919 CVSS score: 8.6, the issue impacts CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, and...

The vulnerability of Check Point Quantum Gateway and Check Point Spark, part of the comprehensive security system CloudGuard Network, stems from the lack of protection for operational data. This allows attackers to gain access to the protected information.

The vulnerability of Check Point Quantum Gateway and Check Point Spark, part of the comprehensive security system CloudGuard Network, is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain access to protected information from...

TotalCloud Insights: Uncovering the Hidden Dangers in Google Cloud Dataproc

Summary The Apache Hadoop Distributed File System HDFS can be vulnerable to data compromise when a Compute Engine cluster is in a public-facing virtual private cloud VPC or shares the VPC with other Compute Engine instances. Google Cloud Platform GCP provides a default VPC called default. This VP...

VulnCheck KEV: CVE-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, vault-k8s-fips, rekor, step-fips, kube-oidc-proxy, smarter-device-manager, step-ca, skaffold, direnv, dex-k8s-authenticator, trillian, guac, kubescape, gostatsd, fulcio, paranoia, gobump, kubernetes-dashboard-metrics-scraper-fips, tigera-operator,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: kubernetes, nodetaint, spark-operator, kubernetes-csi-driver-hostpath, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater, kubernetes-dns-node-cache, local-static-provisioner, kubeflow-pipelines...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes, nodetaint, spark-operator, kubernetes-csi-driver-hostpath, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater, kubernetes-dns-node-cache, local-static-provisioner, kubeflow-pipelines...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, harbor-scanner-trivy, http-echo, flyte, chezmoi, mods, caddy, minio, flux-kustomize-controller, supercronic, terragrunt, mc, gobuster, nri-mongodb, protoc-gen-go-grpc, sbom-scorecard, k8sgpt-operator, bazelisk, neuvector-sigstore-interface,...

CVE-2024-29025 vulnerabilities

Vulnerabilities for packages: tez, selenium, druid, cloudwatch-exporter, keycloak, opensearch, wavefront-proxy, sonarqube-10...

CVE-2024-29025 vulnerabilities

Vulnerabilities for packages: opensearch, sonarqube-10, spark, celeborn, seata, elasticsearch, management-api-for-apache-cassandra-4.0, druid, selenium, tez, wavefront-proxy, keycloak, cloudwatch-exporter...

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

Multiple threat actors are exploiting the recently disclosed security flaws in JetBrains TeamCity software to deploy ransomware, cryptocurrency miners, Cobalt Strike beacons, and a Golang-based remote access trojan called Spark RAT. The attacks entail the exploitation of CVE-2024-27198 CVSS score...

GHSA-R978-9M6M-6GM6 vulnerabilities

Vulnerabilities for packages: tez, confluent-common-docker, confluent-kafka, solr, trino...

CVE-2024-23944 vulnerabilities

Vulnerabilities for packages: spark, solr, trino, confluent-common-docker, confluent-kafka, tez...

CVE-2024-23944 vulnerabilities

Vulnerabilities for packages: tez, confluent-common-docker, confluent-kafka, solr, trino...

GHSA-7W75-32CG-R6G2 vulnerabilities

Vulnerabilities for packages: tomcat...

CVE-2024-24549 vulnerabilities

Vulnerabilities for packages: tomcat...

BIT-SPARK-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

BIT-SPARK-2021-38296 Apache Spark Key Negotiation Vulnerability

Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive attack, this would...

BIT-SPARK-2022-33891 Apache Spark shell command injection vulnerability via Spark UI

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to...

BIT-SPARK-2023-22946 Apache Spark proxy-user privilege escalation from malicious configuration class

In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges. The application can execute code with the privileges of the submitting user, however, by providing malicious configuration-related classes on the classpath. This...