Vulnerabilitycritical

Week in review: PaperCut vulnerabilities, VMware fixes critical flaws, RSA Conference 2023

Help Net Securityby @helpnetsecurityApr 30, 2023 · 00:00 UTC (Apr 30, 2023)5 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-27524 CVE-2023-20869 CVE-2023-20870 CVE-2023-20871 CVE-2023-20872 CVE-2023-20864 CVE-2023-20865

Tags: cve-2023-27524 cve-2023-20869 cve-2023-20870 cve-2023-20871 cve-2023-20872 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20864 +1 related CVE CVE-2023-20865	VMware Aria Operations for Logs contains a deserialization vulnerability	9.8 group max	70%		Apr 20, 2023
CVE-2023-20872 +3 related CVEs CVE-2023-20869 CVE-2023-20871 CVE-2023-20870	VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation	8.8 group max	<1%		Apr 25, 2023
CVE-2023-27524	Insecure default SECRET_KEY in Apache Superset enables auth bypass and RCE	9.8	98%	KEVPoC ×2	Apr 24, 2023 KEV Jan 8, 2024

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: RSA Conference 2023 took place at the Moscone Center in San Francisco. Check out our microsite for related news, photos, product releases, and more. Overcoming industry obstacles for decentralized digital identities

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.