SoftNAS Cloud Éí·ÝÑéÖ¤ÈÆ¹ýÎó²îÇ徲ͨ¸æ
Ðû²¼Ê±¼ä 2019-03-21Îó²î±àºÅºÍ¼¶±ð
CVE±àºÅ£ºÔÝÎÞ£¬£¬£¬£¬£¬£¬Î£ÏÕ¼¶±ð£º¸ßΣ£¬£¬£¬£¬£¬£¬ CVSS·ÖÖµ£º¹Ù·½Î´ÆÀ¶¨
Ó°Ïì¹æÄ£
ÊÜÓ°Ïì°æ±¾£º
SoftNAS Cloud 4.2.0ºÍ4.2.1
Îó²î¸ÅÊö
SoftNAS Cloud£¨R£©Êý¾Ý´æ´¢Æ½Ì¨Öз¢Ã÷Îó²î¡£¡£¡£¡£¡£NGINXĬÈÏÉèÖÃÎļþ¾ßÓмì²éÒÔÑéÖ¤Óû§cookieµÄ״̬¡£¡£¡£¡£¡£ÈôÊÇδÉèÖ㬣¬£¬£¬£¬£¬Ôò½«Óû§Öض¨Ïòµ½µÇÂ¼Ò³Ãæ¡£¡£¡£¡£¡£¿£¿£¿£¿£¿£¿ÉÒÔΪ´ËcookieÌṩí§ÒâÖµ£¬£¬£¬£¬£¬£¬ÒÔ±ãÔÚûÓÐÓÐÓÃÓû§Æ¾Ö¤µÄÇéÐÎÏ»á¼ûWeb½çÃæ¡£¡£¡£¡£¡£ÈôÊǿͻ§Î´×ñÕÕSoftNAS°²ÅÅ×î¼Ñʵ¼ù²¢½«SoftNAS StorageCenter£¨R£©¶Ë¿ÚÖ±½Ó̻¶¸øInternet£¬£¬£¬£¬£¬£¬Ôò´ËÎó²îÔÊÐí¹¥»÷Õß»á¼ûWebadmin½çÃæÒÔ½¨ÉèÐÂÓû§»òʹÓÃÖÎÀíȨÏÞÖ´ÐÐí§ÒâÏÂÁ£¬£¬£¬£¬£¬´Ó¶øÎ£¼°Æ½Ì¨ºÍÊý¾Ý¡£¡£¡£¡£¡£
ÐÞ¸´½¨Òé
ÏÖÔÚ³§ÉÌÒÑÐû²¼½â¾öÉÏÊöÎó²îµÄ²¹¶¡£¬£¬£¬£¬£¬£¬Çë¸üÐÂÖÁ4.2.2°æ±¾¡£¡£¡£¡£¡£
²Î¿¼Á´½Ó
https://www.csoonline.com/article/3375199/softnas-cloud-0day-found-upgrade-asap.html#tk.rss_all
https://www.digitaldefense.com/blog/2019-softnas-cloud-zero-day-blog/