FlagThis

The Apache Software Foundation has issued critical security updates to address severe vulnerabilities affecting several of its products, including MINA, HugeGraph-Server, and Traffic Control. These updates are crucial as the identified flaws could potentially allow attackers to compromise systems. Specifically, a SQL Injection vulnerability was discovered in Apache Traffic Control.

Security teams are being urged to immediately patch the 9.9 severity vulnerability within the web content distribution platform. The identified issues highlight a serious risk of exploitation, and it is essential that organizations using these Apache products prioritize applying the latest security updates to protect their systems from potential cyber attacks. The release of these security fixes underscores the continuous need for vigilance in maintaining secure software infrastructures.

ImgSrc: blogger.googleusercontent.com

References:

• The Hacker News - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now - 5d
• CISO2CISO.COM & CYBER SECURITY GROUP - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now – Source:thehackernews.com - 5d
• Osint10x - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now - 5d
• Vulnerability Archives ? Cybersecurity News - CVE-2024-45387 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Apache Traffic Control - 5d
• ciso2ciso.com - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now – Source:thehackernews.com - 4d
• osint10x.com - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now - 4d
• securityonline.info - CVE-2024-45387 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Apache Traffic Control - 4d
• @jos1264 - Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now – Source:thehackernews.com - 4d
• CISO2CISO.COM & CYBER SECURITY GROUP - Apache fixed a critical SQL Injection in Apache Traffic Control – Source: securityaffairs.com - 4d
• Security Archives - Security Affairs - Apache fixed a critical SQL Injection in Apache Traffic Control - 4d
• @jos1264 - Apache fixed a critical SQL Injection in Apache Traffic Control – Source: securityaffairs.com - 4d
• Malware Analysis, News and Indicators - Latest topics - Apache Software Foundation (ASF) addressed a critical SQL Injection vulnerability, tracked as CVE-2024-45387, in Apache Traffic Control. - 4d
• SCM feed for Security Strategy, Plan, Budget - Apache fixes Traffic Control bug that attackers could exploit - 3d
• @BleepingComputer - The Apache Software Foundation has released security updates to address three severe problems that affect MINA, HugeGraph-Server, and Traffic Control products. - 3d
• @hkrn - Apache fixes Traffic Control bug that attackers could exploit - 16h
• securityonline.info - CVE-2024-45387: PoC Published for Critical SQL Injection in Apache Traffic Control - 16h
• Vulnerability Archives ? Cybersecurity News - CVE-2024-45387: PoC Published for Critical SQL Injection in Apache Traffic Control - 13h

Classification:

• HashTags: Apache Vulnerability PatchNow
• Company: Apache
• Target: Apache Users
• Product: Apache Mina
• Feature: Vulnerability Management
• Type: Vulnerability
• Severity: Major