allegation
PoC and exploitation information related to this situation is circulating on the Internet, so organizations using Proxmox VE 7.4 are advised to check and update their systems without delay.
A allegation by Turan Security Xavfsizlik Byulleteni. Statements are as reported by the cited publishers — not verified by DecisionGateway.
Internetda ushbu holatga oid PoC va ekspluatatsiya ma’lumotlari tarqalayotgani sababli, Proxmox VE 7.4 ishlatilayotgan tashkilotlarga tizimlarini kechiktirmasdan tekshirish va yangilash tavsiya etiladi.
Discussion
Related claims
Organizations should immediately check their Proxmox VE version and update systems running PVE 7.4 to a supported and secure version as soon as possible.Turan Security Xavfsizlik Byulleteni · commitmentInformation is circulating about a vulnerability that may allow authentication bypass in Proxmox Virtual Environment (PVE) 7.4 environments.Turan Security Xavfsizlik Byulleteni · allegationThe Proxmox management interface should not be left directly open to the Internet; VPN or other protected access mechanisms should be used.Turan Security Xavfsizlik Byulleteni · commitmentIf successfully exploited, the vulnerability could allow an attacker to access the Proxmox management interface without authentication and seriously impact the virtualization infrastructure.Turan Security Xavfsizlik Byulleteni · predictionOrganizations whose Proxmox management interface is directly exposed to the Internet should pay special attention to this situation.Turan Security Xavfsizlik Byulleteni · statementUnusual and suspicious requests coming to the Proxmox API, including the /api2/json/access/ticket endpoint, should be monitored.Turan Security Xavfsizlik Byulleteni · commitment