• ethiocert
  • ethiocert
  • ethiocert

Agrégateur de contenus

null A newly disclosed vulnerability, tracked as CVE-2024-1403, has been identified in Progress Software OpenEdge Authentication Gateway and AdminServer.

todays news   🚨 Critical Security Alert 🚨 A newly disclosed vulnerability, tracked as CVE-2024-1403, has been identified in Progress Software OpenEdge Authentication Gateway and AdminServer. This flaw could potentially allow attackers to bypass authentication protections, leading to unauthorized access. With a severity rating of 10.0 on the CVSS scoring system, it's crucial to take action.

The vulnerability impacts OpenEdge versions 11.7.18 and earlier, 12.2.13 and earlier, and 12.8.0. Progress Software has released patches in versions OpenEdge LTS Update 11.7.19, 12.2.14, and 12.8.1 to address this issue.

A proof-of-concept (PoC) exploit for CVE-2024-1403 has been made available, revealing that unauthorized access could occur due to improper handling of unexpected username and password inputs. Security experts at Horizon3.ai have dissected the vulnerable AdminServer service, uncovering potential avenues for remote code execution.

Stay vigilant and ensure your systems are updated to the latest patched versions to mitigate the risk posed by this critical vulnerability. #CyberSecurity #CVE20241403 #ProgressSoftware #OpenEdge #PatchNow

Services

 

Services

ema
Protect

This refers to making sure an organization has taken the necessary measures and precautions to secure itself before any cybersecurity problems arise. This area focuses on proactive strategies rather than reactive strategies.

ema
Detect

Incidents cannot be responded to unless they are detected. In fact, detection of security incidents may take weeks or months for many organizations to accomplish.

ema
Respond

Responding to a computer security incident has a few steps. The first step is when the team receives a report of an incident from a constituent, such as a user, business partner or security operations center staff member.

Applications imbriquées

Alerts and Tips

Alerts and Tips

 

Security Awareness

Security Awareness

Tools

Tools