Vulnerabilitymedium

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

The Hacker Newsby @TheHackersNewsOct 23, 2024 · 05:48 UTC (Oct 23, 2024)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2024-8260 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-8260 CVE-2024-43532

Tags: cve-2024-8260 cve-2024-43532 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-43532	Remote Registry Service Elevation of Privilege Vulnerability	8.8	12%		Oct 8, 2024
CVE-2024-8260	A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0	7.3	<1%		Aug 30, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Oct 22, 2024 Vulnerability / Software Security Details have emerged about a now-patched security flaw in Styra's Open Policy Agent ( OPA ) that, if successfully exploited, could have led to leakage of New Technology LAN Manager ( NTLM ) hashes.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.