24-050 (2024年10月29日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Ivanti Avalanche
1011863* - Ivanti Avalanche Multiple Authentication Bypass Vulnerabilities


Kubernetes API Server
1012165 - Kubernetes Ingress-Nginx Code Injection Vulnerability (CVE-2023-5044)


Spring Cloud Skipper Server
1012171 - VMware Spring Cloud Skipper Server Directory Traversal Vulnerability (CVE-2024-22263)


Unix Samba
1012076* - Linux Kernel KSMBD Information Disclosure Vulnerability (CVE-2023-52442)


Web Server HTTPS
1012081* - Centreon SQL Injection Vulnerability (CVE-2024-32501 and CVE-2024-5723)
1012079* - SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995)
1012051* - WordPress Core Cross-Site Scripting Vulnerability (CVE-2024-4439)


Web Server SharePoint BDC
1012113* - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2024-38023 and CVE-2024-38094)


Windows Services RPC Client DCERPC
1012178 - Identified Windows DCERPC AUTH LEVEL CONNECT Windows Remote Registry Request


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

1010095* - Microsoft Windows Management Instrumentation Events