THE INTERNET IS THINKING
Earlier sources: Identity
This security thread follows identity through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗28 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2024-4358: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability ↗
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-06-13 (not the first disclosure date). Action due date: 2024-07-04.
- CISA · Added to KEV · First archived
CVE-2020-17519: Apache Flink Improper Access Control Vulnerability ↗
Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-05-23 (not the first disclosure date). Action due date: 2024-06-13.
- CISA · Added to KEV · First archived
CVE-2023-7028: GitLab Community and Enterprise Editions Improper Access Control Vulnerability ↗
GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-05-01 (not the first disclosure date). Action due date: 2024-05-22.
- CISA · Added to KEV · First archived
CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability ↗
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-03-07 (not the first disclosure date). Action due date: 2024-03-28.
- CISA · Added to KEV · First archived
CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability ↗
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-03-04 (not the first disclosure date). Action due date: 2024-03-25.
- CISA · Added to KEV · First archived
CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability ↗
ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-02-22 (not the first disclosure date). Action due date: 2024-02-29.
- CISA · Added to KEV · First archived
CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability ↗
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-01-18 (not the first disclosure date). Action due date: 2024-02-08.
- CISA · Added to KEV · First archived
CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability ↗
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-01-10 (not the first disclosure date). Actio
- CISA · Added to KEV · First archived
CVE-2023-23752: Joomla! Improper Access Control Vulnerability ↗
Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-01-08 (not the first disclosure date). Action due date: 2024-01-29.
- CISA · Added to KEV · First archived
CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability ↗
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Identity
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.