ConnectWise Vulnerability: Authentication Bypass in ScreenConnect

Security Bulletin: ConnectWise Vulnerability

UPDATE: February 23rd, 2024 The following CVEs have been assigned to the ConnectWise Vulnerability:  CVE-2024-1709 (CVSS: 10): Authentication Bypass POC by Horizion3ai on GitHub  CVE-2024-1708 (CVSS: 8.4): Path Traversal  Widespread exploitation of these vulnerabilities in the wild has been confirmed including comprise of UnitedHealth’s Change Healthcare on February 22nd, by Lockbit. Sophos has confirmed various strains […]