Rewterz Threat Alert – North Korea Linked Konni APT Group – Active IOCs

Rewterz Threat Advisory – CVE-2023-33858 – IBM Business Automation Workflow Vulnerability

September 5, 2023

Rewterz Threat Advisory – CVE-2023-35892 – IBM Financial Transaction Manager for SWIFT Services Vulnerability

Severity

High

Analysis Summary

CVE-2023-35892

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Impact

Information Theft

Indicators Of Compromise

CVE

CVE-2023-35892

Affected Vendors

IBM

Affected Products

IBM Financial Transaction Manager for SWIFT Services 3.2.4

Remediation

Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.

IBM Security Bulletin

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo