Kaseya Rolled Out A Patch For VSA Supply-Chain Attack

In the previous week, we published an article in which we have reported about Kaseya’s supply chain attack, which was discovered early this month. Now, almost ten days later, on 11th July, Kaseys has released a patch for VSA supply-chain attack. The Florida-based software company has fixed three new security vulnerabilities in the released patch to address critical security issues in its Virtual System Administrator (VSA) solution. With this update, the company has fixed a total of seven vulnerabilities, including the three new vulnerabilities. Let’s see the changes Kaseya has made in the VSA release 9.5.7a.

Three new vulnerabilities fixed in the 11th July updates:

Remaining four vulnerabilities reported by DIVD in April 2021:

New Password Policy Rolled Out In The Release:

In the recently released patch VSA version 9.5.7a (9.5.7.2994), Kaseya has made password rest mandatory. Those who install the new patch should change their passwords post login to meet new password requirements.All users will be re-directed to the System > User Settings > Change Logon page, after installing the patch. There they need to change their password.
The update shipped with these changes in the password policy:

Agent Procedures Approvals:

The VSA release 9.5.7a release has made all the changes on the agent procedures that must be approved by a master administrator. It is not possible to disable Agent Procedure signing and approval anymore.

Disabled A Few REST API:

In the new release, some API calls have been disabled temporarily to enhance security. All the disabled API calls will be restored in a later release.

Changes In Agent Package Download:

After the release of 9.5.7a, It is impossible to download an agent installation package without authentication to VSA anymore. The ability to deploy agents to external users will be restored in a future release.

Readiness And Best Practice Guide Available For Both On-Premise And SaaS VSA:

The company has published the readiness guide and best practice guide for the customers to read before they proceed with patching the VSA Supply-Chain Attack.

On-Premise VSA:

SaaS VSA:

Thanks for reading the post. Please share this information and help securing the digital world.

You may also like these articles: