What is the vulnerability?A critical input validation vulnerability (CVE-2024–4879) is identified in ServiceNow’s Now platform hosted in Vancouver and Washington DC, exploiting this vulnerability could lead to potential data breaches and unauthorized system access. Threat actors may weaponize proof-of-concept (PoC) exploits which are publicly available. CISA added CVE-2024–4879 to its Known Exploited Vulnerabilities (KEV) Catalog on July 29, 2024.What is the recommended Mitigation?ServiceNow has released updates for the affected instances. CVE-2024-4879 – Jelly Template Injection Vulnerability in ServiceNow UI Macros – SecurityWhat FortiGuard Coverage is available?FortiGuard Labs recommends users to apply the patches released by the vendor immediately to secure their systems.FortiGuard Intrusion Prevention Service (IPS) protection is currently being investigated to defend against exploitation of CVE-2024-4879.The FortiGuard Incident Response team can be engaged to help with any suspected compromise.
Posted by Apple Product Security via Fulldisclosure on Jul 29
APPLE-SA-07-29-2024-3 iOS 16.7.9 and iPadOS 16.7.9
iOS 16.7.9 and iPadOS 16.7.9 addresses the following issues.
Information about the security content is also available at https://support.apple.com/HT214116.
Apple maintains a Security Releases page at https://support.apple.com/HT201222 which lists recent
software updates with security advisories.
Posted by Apple Product Security via Fulldisclosure on Jul 29
APPLE-SA-07-29-2024-2 iOS 17.6 and iPadOS 17.6
iOS 17.6 and iPadOS 17.6 addresses the following issues.
Information about the security content is also available at https://support.apple.com/HT214117.
Apple maintains a Security Releases page at https://support.apple.com/HT201222 which lists recent
software updates with security advisories.
AppleMobileFileIntegrity
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
2nd…
