Vulnerabilitycritical

Week in review: Clever Office 365 phishing, 2021 CWE Top 25, Patch Tuesday forecast

Help Net Securityby @helpnetsecurityAug 8, 2021 · 00:00 UTC (Aug 8, 2021)6 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-22937 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22937 CVE-2020-8260 CVE-2021-34527

Tags: cve-2021-22937 cve-2020-8260 cve-2021-34527 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-8260	Authenticated RCE in Ivanti Pulse Connect Secure admin web interface (pre-9.1R9)	7.2	96%	KEVPoC	Oct 28, 2020 KEV Nov 3, 2021
CVE-2021-22937	A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive…	7.2	8%		Aug 16, 2021
CVE-2021-34527	PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler	8.8	100%	KEVRansomwarePoC ×3	Jul 2, 2021 KEV Nov 3, 2021

From the original article

6 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and podcasts: Patch bypass flaw in Pulse Secure VPNs can lead to total compromise (CVE-2021-22937) The patch for a vulnerability (CVE-2020-8260) in Pulse Connect Secure VPN devices that attackers have been exploiting in the wild can be bypassed, security researcher Rich Warren has found.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.