Security News > 2022 > March > Singapore uncovers four critical vulnerabilities in Riverbed software

Singapore's Cyber Security Group, an agency charged with securing the nation's cyberspace, has uncovered four critical flaws in code from network software company Riverbed.

The vulnerable application is SteelCentral AppInternals, formerly referred to as AppInternals Xpert, provided by Riverbed's Aternity division.

Along with two others, Kang found a total of seven bugs while testing Riverbed's wares, with four of these rated as critical, all within the AppInternals' Dynamic Sampling Agent.

The four critical vulnerabilities are listed as CVE-2021-42786, CVE-2021-42787, CVE-2021-42853, and and CVE-2021-42854.

"Riverbed worked with the research team on the assessment, identification, and mitigation of the vulnerabilities as they were discovered, evaluated, and validated," Wayne Loveless, CISO, at Riverbed, told The Register.

"Product engineering and security teams have security assessment and testing processes integrated into our software development lifecycle. Updates were made available as part of Riverbed customer support services via the support portal." .

News URL

https://go.theregister.com/feed/www.theregister.com/2022/03/11/riverbed_vulnerabilities/