CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
Briefly

from The Hacker News1 month ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw affecting BeyondTrust products to its Known Exploited Vulnerabilities catalog, citing active exploitation.
The Hacker Newshttps://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html
The vulnerability, tracked as CVE-2024-12356 with a CVSS score of 9.8, is a command injection flaw that enables attackers to run commands as site users.
The Hacker Newshttps://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html
BeyondTrust's investigation revealed that attackers accessed a Remote Support SaaS API key, letting them reset passwords for local application accounts, highlighting the risks of existing vulnerabilities.
The Hacker Newshttps://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html
CISA recommends that users of self-hosted BeyondTrust products update their systems to the latest versions to mitigate the risks posed by the identified vulnerabilities.
The Hacker Newshttps://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html
Read at The Hacker News
#cybersecurity #vulnerabilities #cisa #beyondtrust #command-injection
[
|
]