VulnerabilitycriticalExploited in the wild

Week in review: AWS SSM agents as RATs, Patch Tuesday forecast

Help Net Securityby @helpnetsecurityAug 6, 2023 · 00:00 UTC (Aug 6, 2023)5 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-35082 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35082 CVE-2023-35081

Tags: cve-2023-35082 cve-2023-35081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023
CVE-2023-35082	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core	9.8	100%	KEVRansomware	Aug 15, 2023 KEV Jan 18, 2024

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SpecterOps released version 5. 0 of BloodHound Community Edition (CE), a free and open-source penetration testing solution that maps attack paths in Microsoft Active Directory (AD) and Azure (including Azure AD/Entra ID) environments. It is available for free on GitHub.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.