Vulnerabilitycritical

Week in review: VMware patches critical vulnerability, 1Password affected by Okta breach

Help Net Securityby @helpnetsecurityOct 29, 2023 · 00:00 UTC (Oct 29, 2023)3 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20198 CVE-2023-5631 CVE-2023-34048 CVE-2023-34056

Tags: cve-2023-20198 cve-2023-5631 cve-2023-34048 cve-2023-34056 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-34048 +1 related CVE CVE-2023-34056	Unauthenticated Out-of-Bounds Write RCE in VMware vCenter Server	9.8 group max	99%	KEVPoC	Oct 25, 2023 KEV Jan 22, 2024
CVE-2023-5631	Stored XSS in Roundcube Webmail exploited in the wild (CVE-2023-5631)	5.4	76%	KEVPoC	Oct 18, 2023 KEV Oct 26, 2023

From the original article

3 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: GOAD: Vulnerable Active Directory environment for practicing attack techniques Game of Active Directory (GOAD) is a free pentesting lab. It provides a vulnerable Active Directory environment for pen testers to practice common attack methods.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.