Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Edit VUL-001

Cancel
Description

The maker of the remote management agent published an advisory about a flaw that lets an unauthenticated attacker run commands on any managed machine through the agent's network port. The agent runs on customer servers and workstations, so one exploited machine could lead to many customers. A fixed version is available and the rollout is planned.
    • AST-001 — Customer configuration database
    • AST-002 — Customer contracts and SLAs
    • AST-003 — Customer network diagrams
    • AST-004 — Privileged credential vault contents
    • AST-005 — Backup catalogues and encryption keys
    • AST-006 — Employee HR records
    • AST-007 — Financial administration
    • AST-008 — ISMS documentation
    • AST-009 — Monitoring and audit logs
    • AST-010 — Public website content
    • AST-011 — Remote monitoring and management platform
    • AST-012 — Service desk ticketing system
    • AST-013 — Virtualisation platform
    • AST-014 — Backup software
    • AST-015 — Endpoint detection and response agents
    • AST-016 — Identity provider and single sign-on
    • AST-017 — Documentation wiki
    • AST-018 — Customer VPN gateway software
    • AST-019 — Legacy hosting control panel
    • AST-020 — Core network switches, data centre A
    • AST-021 — Core network switches, data centre B
    • AST-022 — Perimeter firewalls
    • AST-023 — Hypervisor hosts, data centre A
    • AST-024 — Hypervisor hosts, data centre B
    • AST-025 — Primary storage arrays
    • AST-026 — Employee laptop fleet
    • AST-027 — Mobile device fleet
    • AST-028 — Hardware security keys
    • AST-029 — Next-generation firewall refresh
    • AST-031 — Contractor laptop of Imogen Clarke
    • AST-032 — Microsoft 365 tenant
    • AST-033 — Colocation space, data centre A
    • AST-034 — Colocation space, data centre B
    • AST-035 — Internet and transit connectivity
    • AST-036 — Offsite backup storage
    • AST-037 — Network engineering expertise
    • AST-038 — Service desk team knowledge
    • AST-039 — Utrecht office

    Nothing found that matches the search criteria.
    Hold Ctrl/Cmd to select multiple assets.
    Comments on this Vulnerability (1)

    Comments

    Hans Overbeek ·

    The vendor patch is on our own workstations first, @Sam de Vries.

    If that stays quiet I roll it out to the customer fleet in the next change window, which keeps us inside the seven-day target for critical Vulnerabilities.

    Add comment

      Are you sure?

      This action cannot be reverted.

      Leave this page?

      Your changes on this form are not saved. If you leave, they are lost.