PT-2021-1179

Name of the Vulnerable Software and Affected Versions: .NET Core affected versions not specified Description: The issue concerns .NET Core, a managed-software framework that implements a subset of the .NET framework APIs and several new APIs, and includes a CLR implementation. Recommendations: At...

Solution Providers Can Now Add Incident Response to Their Services Portfolio For Free

The Incident Response IR services market is in accelerated growth due to the rise in cyberattacks that result in breaches. More and more organizations, across all sizes and verticals, choose to outsource IR to 3rd party service providers over handling security incidents in-house. Cynet is now...

.NET Core 3.1 security and bugfix update

An update for .NET Core 3.1 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

.NET Core 2.1 security and bugfix update

An update for .NET Core 2.1 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Low: .NET Core 2.1 security and bugfix update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 2.1.525 and .NET Core...

Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic

Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service DNSaaS providers that could allow attackers to exfiltrate sensitive information from corporate networks. "We found a simple loophole that allowed us to intercept a portion of worldwide dynamic...

Path traversal

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

CVE-2021-38137

CVE-2021-38137 affects Corero SecureWatch Managed Services 9.7.2.0020, where swa-monitor and cns-monitor privilege checks are insufficient, allowing a user to perform actions outside their role. Documented impact is a privilege escalation-type issue with publicly reported CVSS scores: CVSS v2 bas...

PT-2021-21959

Name of the Vulnerable Software and Affected Versions: Corero SecureWatch Managed Services version 9.7.2.0020 Description: The issue arises from incorrect privilege checking for swa-monitor and cns-monitor users, allowing them to perform actions outside their designated roles. Recommendations: Fo...

CVE-2021-38136: Improper Limitation of a Pathname to a Restricted Directory

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

Corero SecureWatch Managed Services 路径遍历漏洞

Corero Network Security Corero SecureWatch Managed Services is a provider of Corero SecureWatch Managed Services from Corero Network Security in the United States. A path traversal vulnerability exists in Corero SecureWatch Managed Services 9.7.2.0020, which arises from a network system or produc...

Corero Network Security Corero SecureWatch Managed Services 授权问题漏洞

Corero Network Security Corero SecureWatch Managed Services is a provider of Corero SecureWatch Managed Services from Corero Network Security, USA. An authorization issue vulnerability exists in Coreo SecureWatch Managed Services 9.7.2.0020, which allows an attacker to perform actions that do not...

PT-2021-21958

Name of the Vulnerable Software and Affected Versions: Corero SecureWatch Managed Services version 9.7.2.0020 Description: The issue allows a 'low privileged' attacker to read any file on the target host via a Path Traversal vulnerability. This vulnerability can be exploited through the snap file...

CVE-2021-38137: Incorrect Authorization

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...

Supply Chain Attacks from a Managed Detection and Response Perspective

In this blog entry, we will take a look at two examples of supply chain attacks that our Managed Detection and Response MDR team encountered in the past couple of months...

Cynet Empowers IT Resellers and Service Providers to Become Fully Qualified MSSPs

As cyber incidents increase in scope and impact, more and more organizations come to realize that outsourcing their defenses is the best practice—significantly increasing the Managed Security Service Provider MSSP market opportunities. Until recently, IT integrators, VARs, and MSPs haven't...

dotnet5.0 bugfix update

An update for .NET 5.0 is now available for Rocky Linux. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation...