°ÍÎ÷ij¹ûÕæµÄElasticsearchʵÀý°üÀ¨2.23ÒÚÌõ¹«ÃñÐÅÏ¢

Ðû²¼Ê±¼ä 2024-01-12
1. °ÍÎ÷ij¹ûÕæµÄElasticsearchʵÀý°üÀ¨2.23ÒÚÌõ¹«ÃñÐÅÏ¢


¾ÝýÌå1ÔÂ11ÈÕ±¨µÀ£¬£¬£¬£¬£¬£¬£¬Õâ´ÎÊý¾Ýй¶̻¶ÁËÁè¼Ý 2.23 ÒÚÌõÐÅÏ¢£¬£¬£¬£¬£¬£¬£¬Åú×¢°ÍÎ÷È«ÌåÉú³Ý¿ÉÄܶ¼Êܵ½ÁËÓ°Ïì¡£¡£¡£Êý¾Ý°üÀ¨È«Ãû¡¢³öÉúÈÕÆÚ¡¢ÐÔ±ðºÍ¹«»ý½ðºÅÂ루Cadastro de Pessoas F¨ªsicas£©£¨°ÍÎ÷µÄ 11 λÄÉ˰ÈËʶÓÖÃûÂ룩µÈÐÅÏ¢¡£¡£¡£Ö»¹ÜÕâЩÊý¾Ý²»ÔÙ¹ûÕæ£¬£¬£¬£¬£¬£¬£¬µ«Ëü¿ÉÄÜÒÑÂäÈë¶ñÒâÐÐΪÕßÊÖÖУ¬£¬£¬£¬£¬£¬£¬ËûÃÇ¿ÉÄÜ»áʹÓÃÕâЩÐÅÏ¢¾ÙÐÐÉí·Ý͵ÇÔ¡¢Ú²Æ­ºÍÓÐÕë¶ÔÐÔµÄÍøÂç·¸·¨¡£¡£¡£´ËÀàÐÐΪ¿ÉÄÜ»á¸øÊܺ¦Õß´øÀ´¾­¼ÃËðʧ¡¢ÕË»§Ð¹Â¶ºÍÆäËûÑÏÖØÐ§¹û¡£¡£¡£Ð¹Â¶µÄ¹æÄ£·Å´óÁËÆäʹÓõÄDZÔÚË𺦡£¡£¡£


2. Ivanti VPNÖеÄÁ½¸ö0dayÎó²î¿ÉÈÆ¹ýÑéÖ¤½¨ÉèºóÃÅÕ˺Å


ýÌå1ÔÂ11ÈÕ£¬£¬£¬£¬£¬£¬£¬Ñо¿Ö°Ô±ÌåÏÖ£¬£¬£¬£¬£¬£¬£¬Î´ÖªÍþвÐÐΪÕßÕýÔÚÆð¾¢Ãé×¼Ivanti VPNÖеÄÁ½¸öÒªº¦µÄÁãÈÕÎó²î£¬£¬£¬£¬£¬£¬£¬ÕâЩÎó²îʹËûÃÇÄܹ»ÈƹýË«ÒòËØÉí·ÝÑéÖ¤£¬£¬£¬£¬£¬£¬£¬²¢ÔÚʹÓà Ivanti µÄÐéÄâרÓÃÍøÂç×°±¸µÄÍøÂçÄÚÖ´ÐжñÒâ´úÂë¡£¡£¡£Ivanti ÔÚÖÜÈýÐû²¼µÄÌû×ÓÖб¨¸æÁËÓйØÁãÈÕÎó²îµÄ»ù±¾Ï¸½Ú£¬£¬£¬£¬£¬£¬£¬±Þ²ß¿Í»§Á¬Ã¦×ñÕÕ»º½âÖ¸ÄÏ¡£¡£¡£ËüÃǵıàºÅΪ CVE-2023-846805 ºÍ CVE-2024-21887£¬£¬£¬£¬£¬£¬£¬×¤ÁôÔÚ Ivanti Connect Secure£¨Ò»ÖÖ VPN ×°±¸£¬£¬£¬£¬£¬£¬£¬Í¨³£ËõдΪ ICS£©ÖС£¡£¡£ÕâÖÖÆÕ±éʹÓÃµÄ VPN ÒÔǰ³ÆÎª Pulse Secure£¬£¬£¬£¬£¬£¬£¬½üÄêÀ´Ôø°üÀ¨¹ýÁãÈÕÎó²î£¬£¬£¬£¬£¬£¬£¬ÕâЩÎó²îÊܵ½ÆÕ±éʹÓ㬣¬£¬£¬£¬£¬£¬ÔÚijЩÇéÐÎÏÂÔì³ÉÁËÆÆËðÐÔÓ°Ïì¡£¡£¡£


3. ˼¿ÆÐÞ¸´UNITY CONNECTIONÖеÄÎó²îCVE-2024-20272


1ÔÂ11ÈÕ£¬£¬£¬£¬£¬£¬£¬Ë¼¿Æ½â¾öÁËÆä Unity Connection ÖеÄÒ»¸öÑÏÖØÈ±ÏÝ£¨±àºÅΪ CVE-2024-20272£©£¬£¬£¬£¬£¬£¬£¬Î´¾­Éí·ÝÑéÖ¤µÄÔ¶³Ì¹¥»÷Õß¿ÉʹÓøÃȱÏÝ»ñÈ¡Ò×Êܹ¥»÷×°±¸µÄ root ȨÏÞ¡£¡£¡£Cisco Unity Connection ÊÇÒ»¸öÐÂÎÅת´ïƽ̨ºÍÓïÒôÓʼþϵͳ£¬£¬£¬£¬£¬£¬£¬ÊÇ˼¿ÆÍ³Ò»Í¨Ñ¶²úÆ·Ì×¼þµÄÒ»²¿·Ö¡£¡£¡£¸ÃÎó²î±£´æÓÚ Cisco Unity Connection »ùÓÚ Web µÄÖÎÀí½çÃæÖС£¡£¡£Î´¾­Éí·ÝÑéÖ¤µÄÔ¶³Ì¹¥»÷Õß¿ÉÒÔʹÓøÃÎÊÌ⽫í§ÒâÎļþÉÏ´«µ½ÊÜÓ°ÏìµÄϵͳ²¢Ôڵײã²Ù×÷ϵͳÉÏÖ´ÐÐÏÂÁî¡£¡£¡£


4. Áè¼Ý30Íò¸öWordPressÍøÕ¾±£´æCVE-2023-6875Îó²î


¾Ý1ÔÂ10ÈÕ±¨µÀ£¬£¬£¬£¬£¬£¬£¬Ò»¸öÑÏÖØÎó²î CVE-2023-6875£¬£¬£¬£¬£¬£¬£¬¸ÃÎó²îÕë¶ÔÊ¢ÐÐµÄ WordPress SMTP²å¼þ Post SMTP£¬£¬£¬£¬£¬£¬£¬¶ÔÁè¼Ý 300,000 ¸öÍøÕ¾×é³ÉÑÏÖØÍþв¡£¡£¡£ËüÊǹ¥»÷ÕßµÄÃÅ»§£¬£¬£¬£¬£¬£¬£¬¿ÉÖ±½ÓͨÍù WordPress µç×ÓÓʼþÇå¾²µÄ½¹µã¡£¡£¡£CVE-2023-6875 µÄ CVSS ·ÖÊýΪ 9.8£¬£¬£¬£¬£¬£¬£¬±£´æÓÚ Post SMTP ÇéÐÎÖУ¬£¬£¬£¬£¬£¬£¬Ê¹ÓÃÁË connect-app REST ¶ËµãÖеÄÀàÐÍÔÓÂÒÎÊÌâ¡£¡£¡£¸ÃȱÏݱ£´æÓÚ 2.8.7 ֮ǰµÄËùÓа汾ÖУ¬£¬£¬£¬£¬£¬£¬¾ÍÏñΪδ¾­Éí·ÝÑéÖ¤µÄ¹¥»÷Õß·­¿ªµÄºóÃÅ¡£¡£¡£ËûÃDz»µ«¿ÉÒÔÖØÖà API ÃÜÔ¿£¨¹ØÓÚÓʼþ³ÌÐòµÄÉí·ÝÑéÖ¤ÖÁ¹ØÖ÷Òª£©£¬£¬£¬£¬£¬£¬£¬»¹¿ÉÒÔÉó²éÃô¸ÐÈÕÖ¾¡£¡£¡£


5. Ultra I&CÔâµ½ºÚ¿ÍÍÅ»ïALPHVµÄ¹¥»÷Áè¼Ý30GBÊý¾Ýй¶


1ÔÂ11ÈÕýÌ屨µÀ£¬£¬£¬£¬£¬£¬£¬ ALPHV µÄºÚ¿ÍÒѾ­ÔÚËûÃǵIJ©¿ÍÉÏй¶ÁË Ultra I&C µÄÊý¾Ý¡£¡£¡£¾ÝËûÃÇÉù³Æ£¬£¬£¬£¬£¬£¬£¬ÔÚ 2023 Äê 12 Ô 27 ÈյĹ¥»÷ÖУ¬£¬£¬£¬£¬£¬£¬ÇÔÈ¡ÁË30GBÊý¾Ý¡£¡£¡£Ultra I&C ÉÐδ¶ÔйÃÜÐÂÎŽÒÏþ̸ÂÛ¡£¡£¡£ALPHV °üÀ¨ÖÖÖÖÐÅÏ¢£¬£¬£¬£¬£¬£¬£¬°üÀ¨É󼯡¢²ÆÎñºÍÔ±¹¤µÄСÎÒ˽¼ÒÊý¾Ý¡£¡£¡£·¸·¨·Ö×ÓÉù³Æ£¬£¬£¬£¬£¬£¬£¬±»µÁÊý¾Ý°üÀ¨ÓйØÁª°îÊÓ²ì¾Ö¡¢±±Ô¼¡¢ÈðÊ¿¡¢ÒÔÉ«ÁкͶà¼Ò¹ú·À¹«Ë¾µÄÐÅÏ¢¡£¡£¡£ÈðÊ¿Áª°î¹ú·À²¿ÌåÏÖ£¬£¬£¬£¬£¬£¬£¬´ËÀàÐÔ×ÓµÄÊÂÎñÒ»Ö±Êܵ½ºÜÊÇÑÏËà¿´´ý£¬£¬£¬£¬£¬£¬£¬Òò´Ë¸Ã²¿·ÖÏÖÔÚÕýÔÚ¾ÙÐг¹µ×ÊӲ졣¡£¡£²»¹ý£¬£¬£¬£¬£¬£¬£¬Æ¾Ö¤ÏÖÔÚµÄÊý¾Ý£¬£¬£¬£¬£¬£¬£¬Èðʿ½¾üµÄ²Ù×÷ϵͳ²¢Î´Êܵ½ÍøÂç¹¥»÷µÄÓ°Ïì¡£¡£¡£µ½ÏÖÔÚΪֹ£¬£¬£¬£¬£¬£¬£¬ºÚ¿ÍÖ»Ðû²¼ÁËÉÌÒµÊý¾Ý¡£¡£¡£


6. ²©ÊÀÁ¦Ê¿ÀÖÂÝĸ°âÊÖ±»±¬23¸öÎó²î¿ÉÔ¶³ÌÖ´ÐÐí§Òâ´úÂë


Nozomi Networks µÄÑо¿Ö°Ô±·¢Ã÷ÆÕ±éʹÓõIJ©ÊÀÁ¦Ê¿ÀÖÂÝĸ°âÊÖNXA015S-36V-BÖб£´æ 23 ¸öÎó²î¡£¡£¡£ÕâЩ¸ß¾«¶È¹¤¾ß±»È«Çò¸÷µØµÄ¹¤³§ºÍ¹¤³§½ÓÄÉ£¬£¬£¬£¬£¬£¬£¬ÓÃÓÚÖÖÖÖ×°±¸µÄÖÆÔìºÍά»¤ÖеĽô¹Ì¡£¡£¡£×¨¼ÒÌåÏÖ£¬£¬£¬£¬£¬£¬£¬ÕâЩÎó²îÔÊÐíÔ¶³Ì»á¼û×°±¸²¢Ö´ÐÐí§Òâ´úÂë¡£¡£¡£Ñо¿Ö°Ô±Õ¹Ê¾µÄÁ½ÖÖ¹¥»÷³¡¾°ÇåÎúµØÅúעЧ¹û¿ÉÄÜÏ൱ÑÏÖØ¡£¡£¡£Ðí¶àÒÑ·¢Ã÷µÄÎó²î¿ÉÔÚδ¾­Éí·ÝÑéÖ¤µÄÇéÐÎÏÂÖ±½Ó´ÓÆóÒµÍøÂç¾ÙÐй¥»÷¡£¡£¡£ÆäËûÈËÔòÔÊÐíÒѾ­»ñµÃ¶Ô¹¤¾ßÖÎÀíϵͳµÄÓÐÏÞ»á¼ûȨÏ޵ĶñÒâÐÐΪÕßÌáÉýÆäÌØÈ¨£¬£¬£¬£¬£¬£¬£¬ÒÔ´ÓÍâ²¿ÍøÂç¾ÙÐÐÖÜÈ«¹¥»÷¡£¡£¡£²©ÊÀÁ¦Ê¿ÀÖÒÑÈ·ÈÏÊÕµ½Ñо¿Ö°Ô±ÌṩµÄÓйØÎó²îµÄÐÅÏ¢£¬£¬£¬£¬£¬£¬£¬²¢ÔÊÐíÔÚ 2024 Äê 1 ÔÂβ֮ǰÐû²¼²¹¶¡¡£¡£¡£