---
title: "Security digest: January 10, 2024"
url: https://erroneo.us/security/2024-01-10/
description: "January 10, 2024 vulnerability digest: 1 brief (Ivanti Connect Secure Zero-Day Chain…); 3 CISA KEV additions (Ivanti, Microsoft); 2 critical advisories…"
type: security-digest-day
section: "Security Digest"
date_published: 2024-01-10
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: January 10, 2024

1 editorial brief, 3 known exploited (cisa kev) additions and 2 critical advisories.

## Take stock

- Act now: Ivanti Connect Secure Zero-Day Chain: Unauthenticated RCE . Anyone running Ivanti Connect Secure or Policy Secure 9.x or 22.x, and anyone who ran an unpatched gateway between December 2023 and the February 2024 patches.
- Do you run any of these? Ivanti Connect Secure and Policy Secure, Microsoft SharePoint Server. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-01-22.
- Composer (PHP): 1 critical advisory ( wwbn/avideo ). Check with composer audit .
- Go: 1 critical advisory ( github.com/go-git/go-git/v5 , gopkg.in/src-d/go-git.v4 ). Check with govulncheck ./... .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Act now** [Ivanti Connect Secure Zero-Day Chain: Unauthenticated RCE](https://erroneo.us/security/briefs/ivanti-connect-secure-auth-bypass-command-injection/index.md): This chain was exploited as a zero-day by a suspected nation-state actor and then mass-exploited; any unpatched appliance should be assumed compromised, not just patched.

## Known exploited (CISA KEV)

- [CVE-2024-21887](https://erroneo.us/security/cve/CVE-2024-21887/index.md) Ivanti Connect Secure and Policy Secure: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (CISA due 2024-01-22)
- [CVE-2023-46805](https://erroneo.us/security/cve/CVE-2023-46805/index.md) Ivanti Connect Secure and Policy Secure: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (CISA due 2024-01-22)
- [CVE-2023-29357](https://erroneo.us/security/cve/CVE-2023-29357/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Privilege Escalation Vulnerability (CISA due 2024-01-31)

## Critical advisories

- [CVE-2023-49599](https://erroneo.us/security/cve/CVE-2023-49599/index.md) WWBN AVideo Insufficient Entropy vulnerbaility — Composer (PHP) wwbn/avideo <= 12.4 → no fix
- [CVE-2023-49569](https://erroneo.us/security/cve/CVE-2023-49569/index.md) Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients — Go github.com/go-git/go-git/v5 >= 5.0.0, < 5.11.0 → 5.11.0; Go gopkg.in/src-d/go-git.v4 >= 4.0.0, <= 4.13.1 → no fix

---
Source page: https://erroneo.us/security/2024-01-10/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt