Exploit / PoCcriticalExploited in the wild

CISA adds Ivanti and Microsoft SharePoint bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJan 11, 2024 · 15:33 UTC (Jan 11, 2024)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-21887 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-21887 CVE-2023-46805 CVE-2023-29357

Tags: cve-2024-21887 cve-2023-46805 cve-2023-29357 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-29357	Privilege Escalation via JWT Authentication Bypass in Microsoft SharePoint Server	9.8	100%	KEVRansomware	Jun 14, 2023 KEV Jan 10, 2024
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure and Microsoft SharePoint bugs to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.