CISA Warns of Active Exploits in Apache Flink and NextGen Healthcare Flaws

TL;DR Summary
CISA has added a security flaw in Apache Flink, CVE-2020-17519, to its Known Exploited Vulnerabilities catalog due to active exploitation. The flaw allows unauthorized access to sensitive information via improper access control in Flink versions 1.11.0 to 1.11.2. Federal agencies are advised to apply the latest fixes by June 13, 2024.
- CISA Warns of Actively Exploited Apache Flink Security Vulnerability The Hacker News
- Three-year-old Apache Flink flaw under active attack The Register
- CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw SecurityWeek
- CISA issues warning for new actively exploited NextGen Healthcare Mirth Connect vulnerability TechRadar
- Apache Flink flaw is back, and being actively exploited TechRadar
Reading Insights
Total Reads
0
Unique Readers
1
Time Saved
1 min
vs 2 min read
Condensed
78%
231 → 51 words
Want the full story? Read the original article
Read on The Hacker News