![BARRY'S PRISON RUN! (OBBY) [CHRISTMAS EDITION] – 5 Hidden Presents Roblox Gameplay Walkthrough](https://techcratic.com/wp-content/uploads/2024/12/1734946103_maxresdefault-360x180.jpg)
![[2024 Upgrade] INSAUTO Tesla Model Y Windshield Sunshade Umbrella-Protect Car from Sun…](https://techcratic.com/wp-content/uploads/2024/12/61aJHRkDWTL._AC_SL1392_-360x180.jpg)
Divya
2024-12-09 04:20:00
gbhackers.com
Qlik has identified critical vulnerabilities in its Qlik Sense Enterprise for Windows software that could lead to remote code execution (RCE) if exploited. Security patches have been released to mitigate these risks and ensure system integrity.
The vulnerabilities, discovered during Qlik’s internal security testing, pose a significant threat to systems running Qlik Sense Enterprise for Windows.
If an attacker successfully exploits these flaws, they could gain control of the server, execute unauthorized commands, and compromise data confidentiality and integrity. Fortunately, there have been no reports of these vulnerabilities being exploited maliciously. However, immediate action is required to mitigate the risks.
Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar
Vulnerability Details
- Remote Code Execution (RCE) via Connectors
- CVE-pending (QB-29918, QB-29750)
- Severity: High (CVSS Score: 8.8)
- Description: Unprivileged users with network access can potentially create connection objects that trigger the execution of arbitrary executable files.
- Broken Access Control (BAC)
- CVE-pending (QB-29586, QB-29864, QB-29482, QB-29802)
- Severity: High (CVSS Score: 7.5)
- Description: These vulnerabilities may allow unauthorized users to execute remote commands, risking the availability, integrity, and confidentiality of the system.
Affected Software
| Version | Impact |
| May 2024 Patch 9 | Vulnerable |
| February 2024 Patch 13 | Vulnerable |
| November 2023 Patch 15 | Vulnerable |
| August 2023 Patch 15 | Vulnerable |
| May 2023 Patch 17 | Vulnerable |
| February 2023 Patch 14 | Vulnerable |
To address these vulnerabilities, users are advised to upgrade to fixed versions of Qlik Sense Enterprise for Windows immediately.
The recommended updates include November 2024 Initial Release, May 2024 Patch 10, February 2024 Patch 14, November 2023 Patch 16, August 2023 Patch 16, May 2023 Patch 18, and February 2023 Patch 15. The patches resolve the issues, ensuring system security and stability.
Additionally, a workaround has been provided for extension and visualization errors by modifying the Repository configuration file. This workaround can be applied before or after the upgrade for those currently facing visualization-related challenges.
To ensure your system is protected against exploitation, download the patched versions from the official Qlik Download page (customer login required).
Customers are strongly encouraged to apply these updates promptly and reach out to Qlik Support if assistance is needed. Prioritizing these fixes will prevent potential compromise of your Qlik Sense Enterprise servers.
Analyse Real-World Malware & Phishing Attacks With ANY.RUN - Get up to 3 Free Licenses
Keep your files stored safely and securely with the SanDisk 2TB Extreme Portable SSD. With over 69,505 ratings and an impressive 4.6 out of 5 stars, this product has been purchased over 8K+ times in the past month. At only $129.99, this Amazon’s Choice product is a must-have for secure file storage.
Help keep private content private with the included password protection featuring 256-bit AES hardware encryption. Order now for just $129.99 on Amazon!
Support Techcratic
If you find value in Techcratic’s insights and articles, consider supporting us with Bitcoin. Your support helps me, as a solo operator, continue delivering high-quality content while managing all the technical aspects, from server maintenance to blog writing, future updates, and improvements. Support Innovation! Thank you.
Bitcoin Address:
bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge
Please verify this address before sending funds.
Bitcoin QR Code
Simply scan the QR code below to support Techcratic.
Please read the Privacy and Security Disclaimer on how Techcratic handles your support.
Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.
