Versa Director Vulnerability: What Organizations Need

Versa Director contains an improper input validation vulnerability (CVE-2024-45229, CVSS 6.6) in some unauthenticated REST APIs that can expose authentication tokens of logged-in users via crafted GET requests; affected versions released prior to 2024-09-09 should be patched immediately and mitigations such as WAFs, API gateways, network segmentation, and monitoring applied.