Posted by Luke Symons on Jul 07
1. INFORMATION
————–
[+] CVE : CVE-2022-43684
[+] Title : Insecure Access Control To Full Admin Compromise
[+] Vendor : ServiceNow
[+] Publication date : June 2023
[+] Credits : Luke Symons, Tony Wu, Eldar Marcussen, Gareth
Phillips, Jeff Thomas, Nadeem Salim, and Stephen Bradshaw.
2. AFFECTED VERSIONS
——————–
* Quebec prior to Patch 10 Hot Fix 8b
* Rome prior to Patch 10 Hot…
More Stories
ofono-2.14-1.fc40
FEDORA-2024-112fde4e1b Packages in this update: ofono-2.14-1.fc40 Update description: Update to v2.14 Read More
icecat-flatpak-115.18.0-2
FEDORA-FLATPAK-2024-5ad8ccec67 Packages in this update: icecat-flatpak-115.18.0-2 Update description: Updated patchset for CVE-2024-11693 CVE-2024-11697 CVE-2024-11692 Read More
mupdf-1.24.6-2.fc40
FEDORA-2024-bfc5e25437 Packages in this update: mupdf-1.24.6-2.fc40 Update description: fix CVE-2024-46657 (rhbz#2331626) Read More
mupdf-1.21.1-6.el9
FEDORA-EPEL-2024-94a20f339a Packages in this update: mupdf-1.21.1-6.el9 Update description: fix CVE-2024-46657 (rhbz#2331625) Read More
DSA-5837-1 fastnetmon – security update
Two security issues have been discovered in FastNetMon, a fast DDoS analyzer: Malformed Netflow/sFlow traffic could result in denial of...
DSA-5836-1 xen – security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information...