CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

Technical details about CVE-2024-0313 are not present in the provided documents. The connected records do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2024-0312

CVE-2024-0312 affects Skyhigh Client Proxy. Multiple sources confirm a vulnerability that allows a malicious insider to uninstall the proxy without a valid uninstall password. CNNVD specifies Skyhigh Client Proxy vulnerable versions up to 4.8.1 and earlier; other documents do not specify a fix. T...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0311

CVE-2024-0311 affects Skyhigh Client Proxy on Windows, where a malicious insider can bypass the product’s policy without a valid release code. Connected sources describe a bypass via a named pipe MCPTrayPipe0 (CreateNamedPipeW) and related access-control weaknesses, enabling abuse of SCPBypass.ex...

PT-2024-15461 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Recommendations: At the moment, there is no information about a newer...

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-15463 · Skyhigh +1 · Skyhigh Client Proxy +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A malicious insider exploiting this issue can circumvent existing security controls put in place by the organization. If the victim is using a temporary...

BIT-ARGO-CD-2020-8828

As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster or logs, this issue could be abused for privilege escalation, as Argo has privileged roles. A malicious insider is the most realistic threat, but pod names are not meant to be ke...

BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...

Microsoft boosts its Microsoft 365 Insider Builds on Windows Bounty Program with higher awards and an expanded scope

Starting today, we are doubling the maximum bounty award for the Microsoft 365 Insider Bug Bounty Program to $30,000 USD for high impact scenarios, such as unauthenticated non-sandboxed code execution with no user interaction. We are also expanding the scope of our bounty program to include more...

insider.energytrust.org Cross Site Scripting vulnerability OBB-3857400

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Privacy predictions for 2024

In our previous privacy predictions piece, we outlined trends for 2023. As expected, there was a notable increase in the adoption of digital IDs to replace paper documents. For example, California expanded a pilot program for digital drivers licenses, and Russia introduced laws enabling...

IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the most-targeted sectors

First time ransomware was the top threat in 2023, according to Q4 2023 Talos Incident Response report Ransomware, including pre-ransomware activity, was the top observed threat in the fourth quarter of 2023, accounting for 28 percent of engagements, according to Cisco Talos Incident Response Talo...