SoftNAS Cloud Éí·ÝÑéÖ¤ÈÆ¹ýÎó²îÇ徲ͨ¸æ

Ðû²¼Ê±¼ä 2019-03-21

Îó²î±àºÅºÍ¼¶±ð


CVE±àºÅ£ºÔÝÎÞ£¬£¬£¬ £¬£¬£¬Î£ÏÕ¼¶±ð£º¸ßΣ£¬£¬£¬ £¬£¬£¬ CVSS·ÖÖµ£º¹Ù·½Î´ÆÀ¶¨


Ó°Ïì¹æÄ£


ÊÜÓ°Ïì°æ±¾£º 

SoftNAS Cloud 4.2.0ºÍ4.2.1


Îó²î¸ÅÊö


SoftNAS Cloud£¨R£©Êý¾Ý´æ´¢Æ½Ì¨Öз¢Ã÷Îó²î¡£¡£¡£¡£¡£NGINXĬÈÏÉèÖÃÎļþ¾ßÓмì²éÒÔÑéÖ¤Óû§cookieµÄ״̬¡£¡£¡£¡£¡£ÈôÊÇδÉèÖ㬣¬£¬ £¬£¬£¬Ôò½«Óû§Öض¨Ïòµ½µÇÂ¼Ò³Ãæ¡£¡£¡£¡£¡ £¿£¿£¿£¿£¿£¿ÉÒÔΪ´ËcookieÌṩí§ÒâÖµ£¬£¬£¬ £¬£¬£¬ÒÔ±ãÔÚûÓÐÓÐÓÃÓû§Æ¾Ö¤µÄÇéÐÎÏ»á¼ûWeb½çÃæ¡£¡£¡£¡£¡£ÈôÊǿͻ§Î´×ñÕÕSoftNAS°²ÅÅ×î¼Ñʵ¼ù²¢½«SoftNAS StorageCenter£¨R£©¶Ë¿ÚÖ±½Ó̻¶¸øInternet£¬£¬£¬ £¬£¬£¬Ôò´ËÎó²îÔÊÐí¹¥»÷Õß»á¼ûWebadmin½çÃæÒÔ½¨ÉèÐÂÓû§»òʹÓÃÖÎÀíȨÏÞÖ´ÐÐí§ÒâÏÂÁ£¬£¬ £¬£¬£¬´Ó¶øÎ£¼°Æ½Ì¨ºÍÊý¾Ý¡£¡£¡£¡£¡£


ÐÞ¸´½¨Òé


ÏÖÔÚ³§ÉÌÒÑÐû²¼½â¾öÉÏÊöÎó²îµÄ²¹¶¡£¬£¬£¬ £¬£¬£¬Çë¸üÐÂÖÁ4.2.2°æ±¾¡£¡£¡£¡£¡£


²Î¿¼Á´½Ó


https://www.csoonline.com/article/3375199/softnas-cloud-0day-found-upgrade-asap.html#tk.rss_all

https://www.digitaldefense.com/blog/2019-softnas-cloud-zero-day-blog/