CND News and Blog

New Vulnerabilities Wednesday 18 October

michele654 Vulnerabilities Wednesday, 18 October 2023 323 Hits 0 Comments

New Alerts for Sophos, Atlassian, Google Chrome, Rockwell Automation (Exploit), Dell, and Linux.

Sophos

Sophos has fixed a password disclosure vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall when the password type is set to "specified by sender". Sophos has fixed. CVSSv3 score of 6.5
More info.

Atlassian

Atlassian has fixed 28 vulnerabilities in their products, 2 rated Critical and 26 High. Highest CVSSv3 score of 10.
More info.

Google

Google has updated Chrome for Desktop to include 1 security fix.
More info.

Rockwell Automation Exploit

Stratix 5800 and 5200 are vulnerable to the Cisco IOS XE Web UI Privilege Escalation actively exploited vulnerability. CVSSv3 score of 10.
More info.

Dell

Dell ObjectScale 1.3 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected systems. Dell rates this Critical.
More info.

Linux

SUSE has updated the kernel. More info.
Red Hat has updated kernel-rt. More info.
Ubuntu has updated the kernel. More info.
Amazon Linux 2 has updated the kernel. More info.