{"id":1564563,"date":"2025-03-04T06:34:22","date_gmt":"2025-03-04T08:34:22","guid":{"rendered":"https:\/\/teknomers.com\/fr\/cisco-hitachi-microsoft-et-progress-flaws-activement-exploites-cisa-sonne-alarme\/"},"modified":"2025-03-04T06:34:28","modified_gmt":"2025-03-04T08:34:28","slug":"cisco-hitachi-microsoft-et-progress-flaws-activement-exploites-cisa-sonne-alarme","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/cisco-hitachi-microsoft-et-progress-flaws-activement-exploites-cisa-sonne-alarme\/","title":{"rendered":"Cisco, Hitachi, Microsoft et Progress Flaws activement exploit\u00e9s &#8211; Cisa sonne alarme"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">04 mars 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">The Hacker News<\/span><\/span><span class=\"p-tags\">Cyberattaque \/ vuln\u00e9rabilit\u00e9<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/03\/Cisco-Hitachi-Microsoft-et-Progress-Flaws-activement-exploites-Cisa.png\" style=\"clear: left; display: block; float: left;  text-align: center;\"><\/a><\/div>\n<p>L&#8217;Agence am\u00e9ricaine de s\u00e9curit\u00e9 de la cybers\u00e9curit\u00e9 et des infrastructures (CISA) <a rel=\"noopener nofollow\" href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/03\/03\/cisa-adds-five-known-exploited-vulnerabilities-catalog\" target=\"_blank\">ajout\u00e9<\/a> Cinq d\u00e9faut de s\u00e9curit\u00e9 impactant les logiciels de Cisco, Hitachi Vantara, Microsoft Windows et progressent Whatsup Gold vers ses vuln\u00e9rabilit\u00e9s exploit\u00e9es connues (<a rel=\"noopener nofollow\" href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\">Kev<\/a>) Catalogue, bas\u00e9 sur des preuves d&#8217;exploitation active.<\/p>\n<p>La liste des vuln\u00e9rabilit\u00e9s est la suivante &#8211;<\/p>\n<ul>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-sbr042-multi-vuln-ej76Pke5\" target=\"_blank\">CVE-2023-20118<\/a><\/strong>  (CVSS Score: 6.5) &#8211; Une vuln\u00e9rabilit\u00e9 d&#8217;injection de commande dans l&#8217;interface de gestion bas\u00e9e sur le Web des routeurs de la s\u00e9rie RV petite entreprise Cisco qui permet \u00e0 un attaquant distant authentifi\u00e9 d&#8217;obtenir des privil\u00e8ges de niveau racine et d&#8217;acc\u00e8s aux donn\u00e9es non autoris\u00e9es (non corrig\u00e9es en raison des routeurs atteignant le statut de fin de vie)<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/support.pentaho.com\/hc\/en-us\/articles\/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939\" target=\"_blank\">CVE-2022-43939<\/a><\/strong>  (CVSS Score: 8.6) &#8211; Une vuln\u00e9rabilit\u00e9 de contournement d&#8217;autorisation dans le serveur Hitachi Vantara Pentaho BA qui d\u00e9coule de l&#8217;utilisation de chemins d&#8217;URL non canoniques pour les d\u00e9cisions d&#8217;autorisation (fix\u00e9s en ao\u00fbt 2024 avec les versions 9.3.0.2 et 9.4.0.1)<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/support.pentaho.com\/hc\/en-us\/articles\/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769\" target=\"_blank\">CVE-2022-43769<\/a><\/strong>  (CVSS Score: 8.8) &#8211; Une vuln\u00e9rabilit\u00e9 sp\u00e9ciale d&#8217;injection d&#8217;\u00e9l\u00e9ments dans le serveur Hitachi Vantara Pentaho BA qui permet \u00e0 un attaquant d&#8217;injecter des mod\u00e8les de ressort dans des fichiers de propri\u00e9t\u00e9s, permettant l&#8217;ex\u00e9cution de la commande arbitraire (fix\u00e9e en ao\u00fbt 2024 avec les versions 9.3.0.2 et 9.4.0.1)<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/advisory\/CVE-2018-8639\" target=\"_blank\">CVE-2018-8639<\/a><\/strong>  (Score CVSS: 7.8) &#8211; Une vuln\u00e9rabilit\u00e9 de fermeture ou de lib\u00e9ration des ressources inappropri\u00e9e dans Microsoft Windows Win32k qui permet une escalade locale et authentifi\u00e9e et ex\u00e9cuter du code arbitraire en mode noyau (fix\u00e9 en d\u00e9cembre 2018)<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/community.progress.com\/s\/article\/WhatsUp-Gold-Security-Bulletin-June-2024\" target=\"_blank\">CVE-2024-4885<\/a><\/strong>  (Score CVSS: 9.8) &#8211; Une vuln\u00e9rabilit\u00e9 de travers\u00e9e de chemin en cours WhatsUp Gold qui permet \u00e0 un attaquant non authentifi\u00e9 d&#8217;atteindre l&#8217;ex\u00e9cution du code distant (fix\u00e9 dans la version 2023.1.3 en juin 2024)<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener sponsored\" href=\"https:\/\/thehackernews.uk\/cloud-secure-d\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/03\/Mozilla-met-a-jour-les-termes-de-Firefox-apres-le.jpg\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>Il n&#8217;y a pas ou non de rapports sur la fa\u00e7on dont certains des d\u00e9fauts susmentionn\u00e9s sont arm\u00e9es dans la nature, mais la soci\u00e9t\u00e9 fran\u00e7aise de cybers\u00e9curit\u00e9 Sekoia a r\u00e9v\u00e9l\u00e9 la semaine derni\u00e8re que les acteurs de la menace abusent du CVE-2023-20118 pour corder des routeurs sensibles \u00e0 un botnet appel\u00e9 Polarege.<\/p>\n<p>Quant au CVE-2024-4885, la Fondation ShadowServer a d\u00e9clar\u00e9 qu&#8217;elle avait observ\u00e9 des tentatives d&#8217;exploitation contre la faille au 1er ao\u00fbt 2024. Donn\u00e9es de Greynoise <a rel=\"noopener nofollow\" href=\"https:\/\/viz.greynoise.io\/query\/tags:%22Progress%20WhatsUp%20Gold%20RCE%20CVE-2024-4885%20Attempt%22\" target=\"_blank\">spectacles<\/a> que jusqu&#8217;\u00e0 huit adresses IP uniques de Hong Kong, de la Russie, du Br\u00e9sil, de la Cor\u00e9e du Sud et du Royaume-Uni sont li\u00e9es \u00e0 l&#8217;exploitation malveillante de la vuln\u00e9rabilit\u00e9.<\/p>\n<p>\u00c0 la lumi\u00e8re de l&#8217;exploitation active, les agences f\u00e9d\u00e9rales de direction civile (FCEB) sont invit\u00e9s \u00e0 appliquer les att\u00e9nuations n\u00e9cessaires d&#8217;ici le 24 mars 2025 pour s\u00e9curiser leurs r\u00e9seaux.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant? <span class=\"\">Cet article est un article contribu\u00e9 de l&#8217;un de nos pr\u00e9cieux partenaires.<\/span> Suivez-nous <a rel=\"noopener nofollow\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Gazouillement <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"noopener nofollow\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">Liendin<\/a> Pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/03\/cisco-hitachi-microsoft-and-progress.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80204 mars 2025\ue804The Hacker NewsCyberattaque \/ vuln\u00e9rabilit\u00e9 L&#8217;Agence am\u00e9ricaine de s\u00e9curit\u00e9 de la cybers\u00e9curit\u00e9 et des infrastructures (CISA) ajout\u00e9 Cinq d\u00e9faut de s\u00e9curit\u00e9 impactant les logiciels de Cisco, Hitachi Vantara, Microsoft Windows et progressent Whatsup Gold vers ses vuln\u00e9rabilit\u00e9s exploit\u00e9es connues (Kev) Catalogue, bas\u00e9 sur des preuves d&#8217;exploitation active. La liste des vuln\u00e9rabilit\u00e9s est la [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1564564,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[4807,274266,274265,20217,4805,5859,4168,79002,274264,4161,274263,6124,29739,184006,117912,274267,8362,4160,26380,238617,246491,4172,8700,79016,4166,4164],"class_list":["post-1564563","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-activement","tag-actualites-de-piratage","tag-actualites-des-pirates","tag-alarme","tag-cisa","tag-cisco","tag-comment-pirater","tag-cyber-security-news","tag-cyber-security-news-aujourdhui","tag-cyber-mises-a-jour","tag-cyber-nouvelles","tag-cyberattaques","tag-exploites","tag-flaws","tag-hitachi","tag-malware-ransomware","tag-microsoft","tag-mises-a-jour-de-la-cybersecurite","tag-progress","tag-securite-de-linformation","tag-securite-du-reseau","tag-securite-informatique","tag-sonne","tag-the-hacker-news","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1564563","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1564563"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1564563\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1564564"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1564563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1564563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1564563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}