Cyber

What changed

A command injection vulnerability has been discovered in the web components of Ivanti Connect Secure and Ivanti Policy Secure. This flaw allows authenticated administrators to send specially crafted requests that could execute arbitrary code on the affected systems.

This vulnerability is particularly concerning as it can be exploited in conjunction with CVE-2023-46805, which involves an authenticated bypass issue, further increasing the risk of unauthorized access.

Who is affected

Organizations utilizing Ivanti Connect Secure (ICS) and Ivanti Policy Secure are at risk due to this vulnerability. These products are widely used for secure remote access and network policy management.

The following groups are particularly vulnerable:

• Enterprises relying on Ivanti for secure connectivity solutions.
• IT departments managing remote access for employees.
• Organizations that integrate Ivanti products with other security solutions.
• Service providers offering Ivanti-based services to clients.

What to do

It is crucial for affected organizations to assess their systems for the presence of this vulnerability. Immediate action should be taken to mitigate potential risks.

Administrators should apply any available patches from Ivanti and review security configurations to prevent exploitation.

• Update Ivanti Connect Secure and Policy Secure to the latest versions as soon as patches are released.
• Review and tighten access controls for administrative interfaces.
• Monitor logs for any suspicious activity that may indicate attempts to exploit this vulnerability.
• Stay informed about further updates from Ivanti regarding this and related vulnerabilities.

What changed

Apple has resolved a memory corruption vulnerability that affected multiple products, enhancing security through improved checks. The vulnerability could potentially allow an attacker with arbitrary read and write capabilities to bypass Pointer Authentication.

This issue has been addressed in the latest versions of macOS Ventura (13.1), watchOS (9.2), iOS (16.2), iPadOS (16.2), and tvOS (16.2).

Who is affected

The vulnerability impacts a range of Apple products, particularly those running older versions of iOS and iPadOS.

Users of macOS Ventura, watchOS, iOS, iPadOS, and tvOS prior to the patched versions are at risk.

• macOS Ventura users
• iOS users, especially those on versions prior to 15.7.1
• iPadOS users
• watchOS and tvOS users

What to do

It is crucial for users and administrators to update their devices to the latest versions to mitigate the risk associated with this vulnerability. Regularly applying updates can help protect against potential exploits.

Monitor security advisories from Apple for any further developments or additional vulnerabilities.

• Update to macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2.
• Review security settings related to Pointer Authentication.
• Stay informed about future patches and security updates from Apple.