Critical Vulnerabilities in ConnectWise ScreenConnect, PostgreSQL JDBC, and VMware EAP (CVE-2024-1597, CVE-2024-22245)

Critical Vulnerabilities in ConnectWise ScreenConnect, PostgreSQL JDBC, and VMware EAP (CVE-2024-1597, CVE-2024-22245)

ConnectWise has addressed a CVSS 10 vulnerability in its ScreenConnect product, a desktop and mobile support software providing fast and secure remote access solutions.

In addition to the critical vulnerability, ConnectWise also patched a high-severity path traversal vulnerability (CVSS: 8.4) in the same product, which attackers with high privileges can exploit.

ConnectWise has stated that the vulnerabilities were reported on February 13; they have yet to be assigned …

access addition connectwise critical critical vulnerabilities critical vulnerability cve cvss cvss 10 desktop eap fast high jdbc mobile path postgresql product remote access screenconnect secure remote access severity software solutions support vmware vulnerabilities vulnerability