鏈鏇存柊ScanV婕忔礊妫娴嬫彃浠剁壒寰佸簱鑷崇増鏈細20220907

鏂板婕忔礊妫娴嬫彃浠7涓紝浼樺寲鍘嗗彶鎻掍欢1涓

鏂板婕忔礊妫娴嬫彃浠讹細

1. 娉涘井E-Office 浠绘剰鏂囦欢涓婁紶婕忔礊锛屾彃浠舵洿鏂版椂闂达細2022骞09鏈06鏃

2. 娉涘井E-Office 鍏ㄥ洖鏄炬湇鍔＄璇锋眰浼犳紡娲烇紝鎻掍欢鏇存柊鏃堕棿锛2022骞09鏈05鏃

3. 娉涘井E-Office 杩滅▼浠ｇ爜鎵ц婕忔礊锛屾彃浠舵洿鏂版椂闂达細2022骞09鏈05鏃

4. 娉涘井E-Office 浠绘剰鏂囦欢涓婁紶婕忔礊锛屾彃浠舵洿鏂版椂闂达細2022骞09鏈05鏃

5. 鑷磋繙OA 浠绘剰鏂囦欢涓婁紶婕忔礊锛屾彃浠舵洿鏂版椂闂达細2022骞09鏈05鏃

6. 閫氳揪OA 11.7鍚庡彴SQL娉ㄥ叆婕忔礊锛屾彃浠舵洿鏂版椂闂达細2022骞09鏈05鏃

7. ZOHO ManageEngine Password Manager Pro 杩滅▼浠ｇ爜鎵ц婕忔礊锛圕VE-2022-35405锛夛紝鎻掍欢鏇存柊鏃堕棿锛2022骞09鏈07鏃

婕忔礊鐩稿叧淇℃伅

1. 娉涘井E-Office 浠绘剰鏂囦欢涓婁紶婕忔礊

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈06鏃

婕忔礊绛夌骇:

楂樺嵄

婕忔礊褰卞搷:

娉涘井e-office鏄硾寰棗涓嬬殑涓娆炬爣鍑嗗崗鍚岀Щ鍔ㄥ姙鍏钩鍙般傛硾寰甧-office瀛樺湪浠绘剰鏂囦欢涓婁紶婕忔礊锛屾湭缁忔巿鏉冪殑鏀诲嚮鑰呭彲鍒╃敤璇ユ紡娲炰笂浼犱换鎰忔枃浠讹紝杩滅▼鎵ц浠绘剰浠ｇ爜锛岃幏鍙栨湇鍔″櫒鎺у埗鏉冮檺銆

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梐pp:"娉涘井鍗忓悓鍔炲叕鏍囧噯浜у搧EOffice"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒4,310 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佹煬鍩斿绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=app%3A%22%E6%B3%9B%E5%BE%AE%E5%8D%8F%E5%90%8C%E5%8A%9E%E5%85%AC%E6%A0%87%E5%87%86%E4%BA%A7%E5%93%81EOffice%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

瀹樻柟鏆傛湭淇璇ユ紡娲烇紝璇峰彈褰卞搷鐨勭敤鎴疯仈绯诲畼鏂硅幏鍙栬В鍐虫柟妗堟垨涓存椂灏嗘紡娲濽RL鍔犲叆璁块棶鎺у埗銆

2. 娉涘井E-Office鍏ㄥ洖鏄炬湇鍔＄璇锋眰浼犳紡娲

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈05鏃

婕忔礊绛夌骇:

楂樺嵄

婕忔礊褰卞搷:

娉涘井e-office鏄硾寰棗涓嬬殑涓娆炬爣鍑嗗崗鍚岀Щ鍔ㄥ姙鍏钩鍙般傛硾寰甧-office瀛樺湪鍏ㄥ洖鏄炬湇鍔＄璇锋眰浼犳紡娲烇紝鏈粡鎺堟潈鐨勬敾鍑昏呭彲鍒╃敤璇ユ紡娲炴帰娴嬪唴缃戜俊鎭紝鏀诲嚮鍐呯綉绯荤粺銆

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梐pp:"娉涘井鍗忓悓鍔炲叕鏍囧噯浜у搧EOffice"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒4,310 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佹煬鍩斿绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=app%3A%22%E6%B3%9B%E5%BE%AE%E5%8D%8F%E5%90%8C%E5%8A%9E%E5%85%AC%E6%A0%87%E5%87%86%E4%BA%A7%E5%93%81EOffice%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

瀹樻柟鏆傛湭淇璇ユ紡娲烇紝璇疯仈绯诲畼鏂硅幏鍙栬В鍐虫柟妗堟垨涓存椂灏嗘紡娲濽RL鍔犲叆璁块棶鎺у埗銆

3. 娉涘井E-Office 杩滅▼浠ｇ爜鎵ц婕忔礊

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈05鏃

婕忔礊绛夌骇:

楂樺嵄

婕忔礊褰卞搷:

娉涘井e-office鏄硾寰棗涓嬬殑涓娆炬爣鍑嗗崗鍚岀Щ鍔ㄥ姙鍏钩鍙般傛硾寰甧-office瀛樺湪杩滅▼浠ｇ爜鎵ц婕忔礊锛屾湭缁忔巿鏉冪殑鏀诲嚮鑰呭彲鍒╃敤璇ユ紡娲炶繙绋嬫墽琛屼换鎰忎唬鐮侊紝鑾峰彇鏈嶅姟鍣ㄦ帶鍒舵潈闄愩

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梐pp:"娉涘井鍗忓悓鍔炲叕鏍囧噯浜у搧EOffice"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒4,310 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佹煬鍩斿绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=app%3A%22%E6%B3%9B%E5%BE%AE%E5%8D%8F%E5%90%8C%E5%8A%9E%E5%85%AC%E6%A0%87%E5%87%86%E4%BA%A7%E5%93%81EOffice%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

瀹樻柟鏆傛湭淇璇ユ紡娲烇紝璇疯仈绯诲畼鏂硅幏鍙栬В鍐虫柟妗堬紱鎴栦复鏃跺皢婕忔礊URL鍔犲叆璁块棶鎺у埗銆

4. 娉涘井E-Office 浠绘剰鏂囦欢涓婁紶婕忔礊

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈05鏃

婕忔礊绛夌骇:

楂樺嵄

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梐pp:"娉涘井鍗忓悓鍔炲叕鏍囧噯浜у搧EOffice"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒4,310 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佹煬鍩斿绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=app%3A%22%E6%B3%9B%E5%BE%AE%E5%8D%8F%E5%90%8C%E5%8A%9E%E5%85%AC%E6%A0%87%E5%87%86%E4%BA%A7%E5%93%81EOffice%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

鑱旂郴瀹樻柟鑾峰彇瑙ｅ喅鏂规锛屼娇鐢ㄥ垱瀹囩浘鐨勭敤鎴烽粯璁ゅ嵆鍙槻寰¤婕忔礊銆

5. 鑷磋繙OA浠绘剰鏂囦欢涓婁紶婕忔礊

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈05鏃

婕忔礊绛夌骇:

楂樺嵄

婕忔礊褰卞搷:

鍖椾含鑷磋繙浜掕仈杞欢鑲′唤鏈夐檺鍏徃锛堢畝绉帮細鑷磋繙浜掕仈锛夋垚绔嬩簬2002骞3鏈堬紝鎬婚儴璁剧珛鍦ㄥ寳浜紝濮嬬粓涓撴敞浜庝紒涓氱骇绠＄悊杞欢棰嗗煙锛屾槸涓瀹堕泦浜у搧鐨勮璁°佺爺鍙戙侀攢鍞強鏈嶅姟涓轰竴浣撻珮鏂版妧鏈紒涓氾紝鑷磋繙oa绯荤粺瀛樺湪浠绘剰鏂囦欢涓婁紶婕忔礊锛屾湭缁忔巿鏉冪殑鏀诲嚮鑰呭彲浠ュ埄鐢ㄨ婕忔礊涓婁紶鎭舵剰鏂囦欢锛岃繙绋嬫墽琛屼换鎰忎唬鐮侊紝鑾峰彇鏈嶅姟鍣ㄦ潈闄愩

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梩itle:"V8.0SP2"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒6,243 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佹柊鍔犲潯绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=title%3A%22V8.0SP2%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

瀹樻柟宸插彂甯冭ˉ涓佷慨澶嶈婕忔礊锛岃鍙婃椂鍗囩骇锛屽弬鑰冮摼鎺ワ細https://service.seeyon.com/patchtools/tp.html#/patchList?type=%E5%AE%89%E5%85%A8%E8%A1%A5%E4%B8%81=119锛涗娇鐢ㄥ垱瀹囩浘鐨勭敤鎴烽粯璁ゅ嵆鍙槻寰¤婕忔礊銆

6. 閫氳揪OA 11.7鍚庡彴SQL娉ㄥ叆婕忔礊

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈05鏃

婕忔礊绛夌骇:

涓嵄

婕忔礊褰卞搷:

閫氳揪OA锛圤ffice Anywhere缃戠粶鏅鸿兘鍔炲叕绯荤粺锛夋槸鐢卞寳浜氳揪淇＄绉戞妧鏈夐檺鍏徃鑷富鐮斿彂鐨勫崗鍚屽姙鍏嚜鍔ㄥ寲杞欢锛屾槸涓庝腑鍥戒紒涓氱鐞嗗疄璺电浉缁撳悎褰㈡垚鐨勭患鍚堢鐞嗗姙鍏钩鍙般傞氳揪oa鍚庡彴瀛樺湪SQL娉ㄥ叆婕忔礊锛屾敾鍑昏呭彲鍒╃敤璇ユ紡娲炶幏鍙栨暟鎹簱鏁忔劅淇℃伅銆

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梐pp:"Tongda OA"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒72,521 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪涓浗銆佺編鍥界瓑鍥藉銆

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=app%3A%22Tongda%20OA%22锛



鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:

瀹樻柟宸插彂甯冩洿鏂拌ˉ涓侊紝璇峰彈褰卞搷鐨勫鎴峰強鏃朵笅杞芥洿鏂拌嚦鏈鏂扮増鏈紝浣跨敤鍒涘畤鐩剧殑鐢ㄦ埛榛樿鍗冲彲鎷︽埅姝ゆ紡娲炪

7. ZOHO ManageEngine Password Manager Pro 杩滅▼浠ｇ爜鎵ц婕忔礊锛圕VE-2022-35405锛

婕忔礊鎻掍欢鏇存柊鏃堕棿:

2022骞09鏈07鏃

婕忔礊绛夌骇:

楂樺嵄

婕忔礊鏉ユ簮锛

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html銆

婕忔礊褰卞搷:

ZOHO ManageEngine Password Manager Pro鏄編鍥藉崜璞紙ZOHO锛夊叕鍙哥殑涓娆惧瘑鐮佺鐞嗗櫒銆俍OHO ManageEngine Password Manager Pro 12101 涔嬪墠鐗堟湰鍜孭AM360 5510涔嬪墠鐗堟湰瀛樺湪婕忔礊锛屾湭缁忔巿鏉冪殑鏀诲嚮鑰呭彲浠ュ埄鐢ㄨ婕忔礊杩滅▼鎵ц浠绘剰浠ｇ爜锛岃幏鍙栨湇鍔″櫒鏉冮檺銆

褰卞搷鑼冨洿锛

鏍规嵁ZoomEye缃戠粶绌洪棿鎼滅储寮曟搸鍏抽敭瀛梩itle:"ManageEngine Password"瀵规綔鍦ㄥ彲鑳界洰鏍囪繘琛屾悳绱紝鍏卞緱鍒3 鏉P鍘嗗彶璁板綍銆備富瑕佸垎甯冨湪缇庡浗銆佹柊鍔犲潯绛夊浗瀹躲

锛圸oomEye鎼滅储閾炬帴锛歨ttps://www.zoomeye.org/searchResult?q=title%3A%22ManageEngine%20Password%22锛

鍏ㄧ悆鍒嗗竷锛



寤鸿瑙ｅ喅鏂规:



寤鸿瑙ｅ喅鏂规:

璇峰彈褰卞搷鐨勭敤鎴峰強鏃跺崌绾у埌鏈鏂扮増鏈互淇璇ユ紡娲烇紝璇︽儏鍙傝冮摼鎺ワ細https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html銆

鎻掍欢浼樺寲1涓

1銆佷紭鍖栤淴-Forwarded-For 浼犵粫杩囬獙璇佲濇彃浠讹紝琛ュ厖WAF Blocking鐗瑰緛锛岄檷浣庢彃浠惰鎶ョ巼銆

浠ヤ笂鎻掍欢鏇存柊銆佷紭鍖栨潵婧愪簬鍒涘畤瀹夊叏鏅鸿剳澶ф暟鎹垎鏋愬钩鍙帮紝瀵硅繎鏈熸紡娲炲埄鐢ㄦ儏鍐靛強鍒╃敤鏂瑰紡鍒嗘瀽鍚庡仛鍑虹殑浼樺寲鏇存柊锛屽悓鏃舵敮鎸乄ebSOC绯诲垪銆



濡傛湁鐩稿叧涓氬姟闇姹

璇锋壂鐮佽仈绯讳笓瀹跺挩璇

馃憞 鐐瑰嚮闃呰鍘熸枃

寮鍚 ScanV 澶氱淮搴︾珛浣撶洃娴