Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.

CVE-2023-4320 is a vulnerability identified in Red Hat Satellite 6.15 running on Red Hat Enterprise Linux 8. The root cause is an arithmetic overflow during the creation of personal access tokens (PATs). This overflow allows an attacker who can create PATs to bypass the intended expiration mechanism, resulting in tokens that remain valid indefinitely. Such tokens can be used to maintain persistent access to the system, undermining the integrity of the managed infrastructure. The vulnerability requires the attacker to have low-level privileges to create tokens but does not require user interaction, making remote exploitation feasible over the network. The CVSS v3.1 score of 7.6 reflects high severity due to the ease of exploitation (low attack complexity), network vector, and significant impact on integrity and confidentiality. While availability impact is low, the indefinite token validity can lead to prolonged unauthorized access, increasing the risk of further compromise. No public exploits have been reported yet, but the vulnerability's nature makes it a critical concern for organizations relying on Red Hat Satellite for lifecycle management of RHEL systems. The flaw highlights the importance of secure token lifecycle management and proper validation of arithmetic operations in security-critical code paths.

Detailed information about CVE-2023-4320: Insufficient Session Expiration in Red Hat Red Hat Satellite 6.15 for RHEL 8 affecting Red Hat Red Hat Satellite 6.15 

CVE-2023-4320: Insufficient Session Expiration in Red Hat Red Hat Satellite 6.15 for RHEL 8 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-4320: Insufficient Session Expiration in Red Hat Red Hat Satellite 6.15 for RHEL 8

Threats Tagged 'cve-2023-4320'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-4320'

Lead Pen Test Professional