Nurettin Erginoz

🚨 SECURITY ALERT: CVE-2024-5861 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-5861 - 🔥 Severity: Medium - 📉 CVSS Score: 5.3 - 🎯 Exploit Probability EPSS: No data found for the specified CVE ID. - 📜 Status according to CISA: Not actively exploited vulnerability. - 🛠️ Exploit: No exploit on GitHub or ExploitDB. - 🛡️ IoCs: No IoCs associated - 📅 Publication Date: 24/07/2024 04:15 UTC - 🖥️ Vulnerable Software: WP EasyPay, WordPress 🔍 EXPLANATION AND MITIGATION: 1. Cause of the Vulnerability: The WP EasyPay plugin lacks a capability check for the "wpep_square_disconnect" function. This function allows users to disconnect their Square account from the plugin. Without proper authorization checks, unauthenticated attackers can exploit this function to disconnect a Square account without authorization. 2. Steps for Mitigation: For WordPress Users: 1. Update the WP EasyPay plugin to version 4.2.4 or later. 2. If you cannot update immediately, manually add the following code to your theme's functions.php file: ```php add_action 'admin_init', function { if ! current_user_can 'manage_options' { remove_action 'admin_post_wpep_square_disconnect', 'wpep_square_disconnect' ; } } ; ``` For Plugin Developers: 1. Add a capability check to the "wpep_square_disconnect" function to ensure that only authorized users can access it. 2. Consider using the WordPress nonce system to prevent unauthorized access. Note: If you are unable to update the plugin or implement the code manually, contact the plugin developer for assistance. 📈 TECHNICAL IMPACT: Attack Vector: Network access, Internet. Attack Complexity: Easy to exploit, does not require special skills. Privileges Required: Does not need special privileges to be exploited. User Interaction: No user interaction needed, can occur in the background. Scope: Does not spread to other systems Confidentiality: Does not affect data confidentiality. Integrity: May modify data in a limited way. Availability: Does not affect system availability. 🔗 STAY SAFE AND INFORMED #CyberSecurity #InfoSec #Vulnerability #CVE #TechNews #AI #Automation

🚨 SECURITY ALERT: CVE-2024-6489 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-6489 - 🔥 Severity: Medium - 📉 CVSS Score: 5.3 - 🎯 Exploit Probability EPSS: No data found for the specified CVE ID. - 📜 Status according to CISA: Not actively exploited vulnerability. - 🛠️ Exploit: No exploit on GitHub or ExploitDB. - 🛡️ IoCs: No IoCs associated - 📅 Publication Date: 20/07/2024 07:33 UTC - 🖥️ Vulnerable Software: WordPress, Getwid – Gutenberg Blocks plugin 🔍 EXPLANATION AND MITIGATION: Cause of the Vulnerability: The plugin lacks a proper capability check on the "getgoogleapikey" function. This allows users with Contributor-level access or higher to modify sensitive data, such as the MailChimp API key, without authorization. Steps for Mitigation: 1. Update the Plugin: Go to the WordPress dashboard and navigate to "Plugins" "Installed Plugins." Locate the "Getwid – Gutenberg Blocks" plugin and click "Update Now." 2. Manual Mitigation if updating is not possible: Open the "wp-config.php" file located in the WordPress root directory. Add the following code before the line that says "That's all, stop editing! Happy blogging.": ``` define 'GETWIDDISABLEGETGOOGLEAPIKEY', true ; ``` 3. Additional Security Measures: Consider limiting access to the WordPress dashboard to only trusted users. Regularly scan your WordPress site for vulnerabilities. Keep WordPress and all plugins up to date. 📈 TECHNICAL IMPACT: Attack Vector: Network access, Internet. Attack Complexity: Easy to exploit, does not require special skills. Privileges Required: Does not need special privileges to be exploited. User Interaction: No user interaction needed, can occur in the background. Scope: Does not spread to other systems Confidentiality: Does not affect data confidentiality. Integrity: May modify data in a limited way. Availability: Does not affect system availability. 🔗 STAY SAFE AND INFORMED #CyberSecurity #InfoSec #Vulnerability #CVE #TechNews #AI #Automation

🚨 SECURITY ALERT: CVE-2024-45096 - IBM Aspera Faspex 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-45096 - 🔥 Severity: Medium - 📉 CVSS Score: 6.5 - 🎯 Exploit Probability EPSS: The EPSS for this CVE has not been published yet. - 📜 Status according to CISA: Not actively exploited vulnerability. - 🛠️ Exploit: No exploit on GitHub or ExploitDB. - 🛡️ IoCs: No IoCs associated - 📅 Publication Date: 05/09/2024 16:24 UTC - 🌐 References: https://lnkd.in/eXAAxjU9 - 🖥️ Vulnerable Software: IBM Aspera Faspex, <= 5.0.9, Application 🔍 EXPLANATION: IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing. 📈 TECHNICAL IMPACT: Attack Vector: Network access, Internet. Attack Complexity: Easy to exploit, does not require special skills. Privileges Required: Requires some limited privileges. User Interaction: No user interaction needed, can occur in the background. Scope: Does not spread to other systems Confidentiality: May reveal sensitive and critical information. Integrity: Does not affect data integrity. Availability: Does not affect system availability. 🤖 Bot-generated post, gathering data from multiple sources and enhanced by AI. 📩 Contact: [email protected] #IBMAsperaFaspex #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation