ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Nov 9, 2023

    Critical Path Traversal Vulnerability Discovered in SysAid Server

    A significant path traversal vulnerability has been identified in SysAid Server, allowing potential code execution. This flaw has been actively exploited in the wild.

    What changed

    A newly discovered path traversal vulnerability in SysAid Server prior to version 23.3.36 poses a serious security risk. This flaw allows attackers to execute arbitrary code by writing files to the Tomcat webroot, a critical component of the server's architecture.

    The vulnerability has been actively exploited since November 2023, highlighting the urgency for users to address this issue.

    Who is affected

    Organizations utilizing SysAid On-Premise versions prior to 23.3.36 are at risk. This vulnerability can lead to severe security breaches if not mitigated promptly.

    The following groups are particularly vulnerable:

    • SysAid On-Premise users and administrators
    • Businesses relying on SysAid for IT service management
    • IT departments managing server environments with outdated SysAid versions
    • Any organization that has not yet updated to the latest version

    What to do

    To protect against this vulnerability, immediate action is recommended. Users should prioritize updating their SysAid Server to the latest version to mitigate the risk of exploitation.

    In addition to updating, organizations should conduct a thorough security review of their systems.

    • Update SysAid Server to version 23.3.36 or later.
    • Implement security monitoring to detect any unauthorized access attempts.
    • Review and strengthen server configurations to minimize exposure to similar vulnerabilities.
    • Educate staff about the risks associated with unpatched software.

  2. Research · Nov 6, 2023

    Performance Issues in X9.42 DH Key Generation and Validation

    Recent findings reveal that generating and validating excessively long X9.42 DH keys can lead to significant performance delays, potentially resulting in Denial of Service scenarios.

    What changed

    The performance of applications utilizing X9.42 Diffie-Hellman (DH) key generation and validation functions has come under scrutiny. Specifically, operations involving excessively long keys or parameters can result in considerable slowdowns.

    Functions such as DH_generate_key(), DH_check_pub_key(), DH_check_pub_key_ex(), and EVP_PKEY_public_check() are particularly affected, leading to potential Denial of Service (DoS) conditions.

    Who is affected

    Various applications and systems that rely on X9.42 DH key generation and validation are at risk. This includes:

    Developers and organizations that implement cryptographic protocols using X9.42 DH standards may experience significant delays.

    • Cryptographic libraries that include X9.42 DH functions.
    • Enterprise applications that utilize these cryptographic methods for secure communications.
    • Any system that relies on external sources for key parameters, increasing the risk of performance degradation.

    What to do

    To mitigate the risks associated with these performance issues, organizations should consider reviewing their implementation of X9.42 DH functions. This includes:

    Implementing checks to limit the length of keys and parameters being processed.

    • Regularly audit cryptographic implementations to ensure compliance with best practices.
    • Consider alternative key generation methods if performance issues persist.
    • Stay informed about updates and patches related to cryptographic libraries.