UCSF IT Technology

Cisco has released security updates to address  vulnerabilities in the Cisco Smart Licensing Utility. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. 

Citrix has released security updates to address Vulnerabilities in Citrix Workspace App for Windows. An attacker could exploit these vulnerabilities to take control of an affected system. 

Request a 21 CFR Part 11 DocuSign account (separate from main UCSF DocuSign account)Instructions on how to sign a 21 CFR Part 11 DocuSign envelope

Apache released a security update to address a vulnerability in Apache Ofbiz.For a complete description of the vulnerabilities and affected systems go to [CVE-2024-45195] Add permission check for view-maps and change defaults for request-maps. IT Security Read more about IT Security service offerings.

Veeam has released security updates to address Critical and other vulnerabilities in multiple Veeam Products.For a complete description of the vulnerabilities and affected systems go to Veeam Security Bulletin (September 2024). IT Security Read more about IT Security service offerings.

VMware has released security updates to address a High vulnerability affecting multiple VMware Fusion. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application. For a complete description of the vulnerabilities and affected systems go to VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-

Android released its August Android update to address a High Actively Exploited and other vulnerabilities in Android Devices. The most severe of these issues is a high security vulnerability in the Framework component that could lead to local escalation of privilege with no additional execution privileges needed.