Book a demo

Our news and updates

Choose category
2 Jul 2024 DevOps
GitLab: The vulnerability allows attackers to DoS attack on the server

In GitLab version 17.1 a medium severity vulnerability CVE-2024-1493 was detected. This vulnerability allows attackers to DoS attack on the server. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-1493/.

 Read more Developer Tools
2 Jul 2024 Data Management and Analytics
MongoDB: The vulnerability allows attackers to affect database performance

In MongoDB version 7.0.3 a medium severity vulnerability CVE-2024-6375 was detected. This vulnerability allows attackers to affect database performance. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6375/.

 Read more Database
2 Jul 2024 Business and Enterprise Solutions
OpenVPN: The vulnerability allows attackers to access sensitive data

In OpenVPN version 2.0.4 a low severity vulnerability CVE-2024-28820 was detected. This vulnerability allows attackers to access sensitive data. There is no fix to this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-28820/.

 Read more CMS
1 Jul 2024 Infrastructure and Network
Authentik: The vulnerability allows attackers to get access to the system

In Authentik a high severity vulnerability CVE-2024-38371 was detected. This vulnerability allows attackers to get access to the system. To address this issue, users must update to versions 2024.6.0, 2024.2.4, and 2024.4.3. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-38371/.

 Read more Security
1 Jul 2024 Infrastructure and Network
Authentik: The vulnerability allows attackers to get admin access

In Authentik a high severity vulnerability CVE-2024-37905 was detected. This vulnerability allows attackers to get admin access. To address this issue, users should update Authentik to versions 2024.6.0, 2024.2.4, and 2024.4.3. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-37905/.

 Read more Security
1 Jul 2024 DevOps
GitLab: The vulnerability allows attackers to get access to sensitive data

In GitLab versions from 16.7 to 17.1.1 a medium severity vulnerability CVE-2024-3959 was detected. This vulnerability allows attackers to get access to sensitive data. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-3959/.

 Read more Developer Tools
1 Jul 2024 DevOps
Gitlab: Accessing Issues and Epics Without SSO via Duo Chat

In GitLab EE all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 a medium severity vulnerability CVE-2024-3115 was detected. Attackers can access issues and epics without an SSO session through Duo Chat. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-3115.

 Read more Developer Tools
1 Jul 2024 DevOps
Gitlab: Service Crash via OpenAPI File

In GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 a medium severity vulnerability CVE-2024-1816 was detected. This problem lets an attacker crash a service by using a specially made OpenAPI file. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-1816.

 Read more Developer Tools
30 Jun 2024 DevOps
Zabbix: Critical server vulnerability wich allows to injection SQL into “clientip” and exploit time based blind SQL injection

In Zabbix version 6.0.0 – 7.0.0alpha1 a critical vulnerability CVE-2024-22120 was detected. This vulnerability allows the attacker to perform command execution for configured scripts. After it is possible to inject SQL into “clientip” and exploit time based blind SQL injection. To address this issue, users are advised to upgrade to the version 7.0.0 beta1. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-22120/.

 Read more Monitoring