Jun 22, 2023
2 new incidents, 0 with updates.
Started
- ClosedPatched
VMware Aria Operations for Networks: Command Injection (CVE-2023-20887)
VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution. Added to CISA KEV on 2023-06-22.
VMware Aria Operations for NetworksClosed Jun 22, 2023
- ClosedPatched
Microsoft AI researchers exposed 38TB via an over-permissive Azure SAS link
A public GitHub repo of Microsoft AI training models shared an Azure Storage SAS token with full-control permissions on a whole storage account. It exposed 38TB of internal data, including workstation backups, secrets and Teams messages. Wiz found and reported it.
Microsoft Azure Storage (SAS token in a GitHub repo)Closed Sep 18, 2023
