Juniper’s security information and event management system (SIEM) Secure Analytics is vulnerable and the developers have closed several security holes.
Advertisement
Vulnerabilities
As a post shows, the developers have closed a total of nine security holes. The majority is classified as a “high” threat level. For example, a vulnerability (CVE-2023-22218 “high”) in the libssh2_packet_add function of libssh2 1.10.0 allows attackers to access unintended memory areas. This is usually how malicious code gets onto systems.
In addition, after successful attacks, attackers can gain higher privileges up to the root (CVE-2023-3899 “high”), access restricted information (CVE-2023-20593 “medium”) or for DoS attacks (CVE-2023-35788 “high”).
How the attack could take place is still unclear. There is currently no evidence of ongoing attacks from Juniper.
Patch now!
The developers claim to have resolved the security issues starting with the Juniper Secury Analytics 7.5.0 UP7 IF02 release.
(of the)
To the homepage
#Security #Updates #Juniper #Secure #Analytics #vulnerable
/cloudfront-eu-central-1.images.arcpublishing.com/prisa/KLVQ2QH2TDBYTAFKDYTTZNJJOI.jpg "The G-7 countries certify the veto on Russian diamonds from January 1 2")
/cloudfront-eu-central-1.images.arcpublishing.com/prisa/AZPANZGIUCKWV7RAAG7PVF5NW4.jpg "Biden urgently calls on the US Congress to approve new funds for Ukraine 3")
/cloudfront-eu-central-1.images.arcpublishing.com/prisa/52WCYGDVFRCTKEHSQPDO242ARI.jpg "Of mixed race 7")
