Category Archives: Advisories

As a security improvement, this update prevents OpenSSL
from returning an error when detecting wrong padding
in PKCS#1 v1.5 RSA, to prevent its use in possible
Bleichenbacher timing attacks.

Advisories

ZDI-24-294: Microsoft Office Performance Monitor Link Following Local Privilege Escalation Vulnerability

March 13, 2024

Read Time:16 Second

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Office. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-26199.

Advisories

ZDI-24-293: Microsoft Skype Protection Mechanism Failure Remote Code Execution Vulnerability

March 13, 2024

Read Time:17 Second

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-21411.

Advisories

ZDI-24-292: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

March 13, 2024

Read Time:17 Second

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-20745.

Advisories

ZDI-24-291: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability

March 13, 2024

Read Time:17 Second

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-20752.

Advisories

Jenkins Arbitrary File Read Vulnerability (CVE-2024-23897)

March 13, 2024

Read Time:51 Second

What is the Vulnerability?
Cyber threat actors are actively targeting Jenkins which is a Java-based open-source automation server widely used by application developers. The critical vulnerability tracked as CVE-2024-23897 could enable remote code execution (RCE) potentially leading to unauthorized access and data compromise. Exploiting this vulnerability allows attackers to read any files on the Jenkins controller file system.FortiRecon ACI service has observed active and recent discussions in the Dark Web. Also, a Proof of Concept (PoC) exploit has been made publicly available which makes this vulnerability crucial for continuous monitoring and more exploitation activities.

What is the Vendor Solution?

Jenkins released a security advisory on January 24, 2024 about this vulnerability. [ Link ]

What FortiGuard Coverage is available?

FortiGuard Labs has provided protection via the IPS signature “Jenkins.LTS.Command.Line.Interface.Arbitrary.File.Read” which was released in early February to detect and block any attack attempts targeting the vulnerability (CVE-2024-23897).

FortiGuard Labs advises organizations to apply the latest Jenkins security updates and patches.

Advisories