Sliver Vulnerable to RCE, Could Pwn Server

CVE-2024-41111

What is CVE-2024-41111?

The vulnerability in Sliver, an open-source cross-platform adversary emulation framework from BishopFox, allows a low-privileged 'operator' user to execute commands on the teamserver as the system root user, leading to unauthorized actions. This flaw enables operators to access console logs, terminate other operator sessions, and manipulate or delete files on the server. Although this issue has been recognized and flagged in previous discussions, it remains unaddressed in the current prerelease version 1.6.0. Organizations using this version are strongly advised against deploying it in production environments until a fix is implemented.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References