Rule Update
24-050 (29 outubro 2024)
Data de publicação: 29 outubro 2024
Descrição
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Avalanche
1011863* - Ivanti Avalanche Multiple Authentication Bypass Vulnerabilities
Kubernetes API Server
1012165 - Kubernetes Ingress-Nginx Code Injection Vulnerability (CVE-2023-5044)
Spring Cloud Skipper Server
1012171 - VMware Spring Cloud Skipper Server Directory Traversal Vulnerability (CVE-2024-22263)
Unix Samba
1012076* - Linux Kernel KSMBD Information Disclosure Vulnerability (CVE-2023-52442)
Web Server HTTPS
1012081* - Centreon SQL Injection Vulnerability (CVE-2024-32501 and CVE-2024-5723)
1012079* - SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995)
1012051* - WordPress Core Cross-Site Scripting Vulnerability (CVE-2024-4439)
Web Server SharePoint BDC
1012113* - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2024-38023 and CVE-2024-38094)
Windows Services RPC Client DCERPC
1012178 - Identified Windows DCERPC AUTH LEVEL CONNECT Windows Remote Registry Request
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1010095* - Microsoft Windows Management Instrumentation Events
Deep Packet Inspection Rules:
Ivanti Avalanche
1011863* - Ivanti Avalanche Multiple Authentication Bypass Vulnerabilities
Kubernetes API Server
1012165 - Kubernetes Ingress-Nginx Code Injection Vulnerability (CVE-2023-5044)
Spring Cloud Skipper Server
1012171 - VMware Spring Cloud Skipper Server Directory Traversal Vulnerability (CVE-2024-22263)
Unix Samba
1012076* - Linux Kernel KSMBD Information Disclosure Vulnerability (CVE-2023-52442)
Web Server HTTPS
1012081* - Centreon SQL Injection Vulnerability (CVE-2024-32501 and CVE-2024-5723)
1012079* - SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995)
1012051* - WordPress Core Cross-Site Scripting Vulnerability (CVE-2024-4439)
Web Server SharePoint BDC
1012113* - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2024-38023 and CVE-2024-38094)
Windows Services RPC Client DCERPC
1012178 - Identified Windows DCERPC AUTH LEVEL CONNECT Windows Remote Registry Request
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1010095* - Microsoft Windows Management Instrumentation Events