Alertas

Critical security vulnerability in VMware products

Alertas A3Sec — Fri, 09 Sep 2022 06:02:05 GMT

A critical authentication bypass vulnerability exists, identified as CVE-2022-31656, which is capable of affecting local domain users in multiple products. "A malicious actor with network access to the user interface can gain administrative access without needing to authenticate."Achieving administrative-level control over a remote system.

This identified vulnerability affects Workspace ONE Access, Identity Manager, and vRealize Automation products.

A3Sec NEWS Filtration BD Coppel

Alertas A3Sec — Fri, 09 Sep 2022 05:58:52 GMT

Hackers gather in underground forums and search for valuable data from organizations all over the Internet. For an indication of data breaches or an imminent attack, IXDR monitors a wide variety of sources on the Deep and Dark Web.

IXDR continuously monitors communications on the "Dark Web" to detect mentions of the most important organizations in the country or any particular case.

Buffer overflow via .PDF file and CVE-2022-2624.

Alertas A3Sec — Fri, 09 Sep 2022 05:57:37 GMT

The CVE-2022-2624 vulnerability was reported for the first time in June and aims to deceive a user through social engineering through the manipulation of the HTML code of a web page in the Microsoft Edge browser (search engine based on Chromium), this in order to make available a .PDF file, which, if opened by a user, will lead to the exploitation of a buffer overflow vulnerability.

Vulnerabilities in IOS

Alertas A3Sec — Fri, 09 Sep 2022 05:56:15 GMT

The CVE-2022-32894 vulnerability was reported on August 18 and found on Apple macOS systems, allowing an application to execute arbitrary code with kernel privileges, i.e. full access to the device, and is declared highly functional.