UCSF IT Technology

Foxit has released security updates to address vulnerabilities in Foxit Reader.  A remote attacker could exploit these vulnerabilities to perform arbitrary code execution. For a complete description of the vulnerabilities and affected systems go to Security updates available in Foxit PDF Reader 12.0.2 and Foxit PDF Editor 12.0.2. IT Security

Lenovo has released security updates to address vulnerabilities in Lenovo UEFI Firmware impacting multiple devices.  Because UEFI is responsible for launching the operating system when a device is powered on, it has made the technology an attractive option for threat actors looking to drop malware that's difficult to detect and remove.

Cisco has released security updates to address Medium and High vulnerabilities in multiple Cisco products.  An attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories page. IT Security

SAP released a security update to address a vulnerability in the Central Management Console and BI Launchpad in SAP BusinessObjects Business Intelligence Platform.  An attacker could exploit this vulnerability to execute arbitrary code. For a complete description of the vulnerabilities and affected systems go to CVE-2022-41203. IT Security

Spring Security has released a security update to address a vulnerability in the Spring Security.  A remote attacker could exploit this vulnerability to access administrative functions without proper authentication. For a complete description of the vulnerabilities and affected systems go to CVE-2022-31692: Authorization rules can be bypassed via forward or include dispatcher types in Spring Security.

Citrix has released security updates to address Critical vulnerabilities impacting Citrix ADC and Citrix Gateway. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

VMware has released security updates to address vulnerabilities in VMware Workspace ONE Assist. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Microsoft released their November Security Update to address vulnerabilities in multiple Microsoft products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to November 2022 Security Updates. IT Security