2019년 12월 24일 보안정보 입니다.

12월 24일 보안정보 입니다.

=================================================

+ 주요 취약점 - Atlassian Confluence Server and Data Center man-in-the-middle (CVE-2019-15006)

1. Atlassian Confluence Server and Data Center man-in-the-middle (CVE-2019-15006)
[요약]
vulnerable to a man-in-the-middle attack
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173357

=================================================

+ 취약점 - Trend Micro Apex One and OfficeScan XG information disclosure (CVE-2019-19691) 외 3건

1. Trend Micro Apex One and OfficeScan XG information disclosure (CVE-2019-19691)
[요약]
** (Apex One은 트렌드마이크로의 엔드포인트 보안솔루션)
vulnerability to execute arbitrary code
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173380

2. Docker 취약점
** (Docker는 리눅스의 응용 프로그램들을 소프트웨어 컨테이너 안에 배치시키는 일을 자동화하는 오픈 소스 프로젝트)
Docker docker-credential-secretservice privilege escalation (CVE-2019-17150)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173371

Docker docker-credential-helpers privilege escalation (CVE-2019-17149)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173370

3. Parallels Parallels Desktop privilege escalation (CVE-2019-17148)
** (Parallels Desktop은 인텔 프로세서가 있는 매킨토시 컴퓨터에 하드웨어 가상화를 제공하기 위하여 만든 소프트웨어)
[요약]
vulnerability to execute arbitrary code
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173369

4. VMware Workstation and Horizon View Agent privilege escalation (CVE-2019-5539)
[요약]
vulnerability to gain administrative privileges
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173356

=================================================

+ 보안정보 - 안드로이드용 트위터 앱에서 취약점 발견 외 2건

1. 안드로이드용 트위터 앱에서 취약점 발견
[요약]
안드로이드용 트위터 앱에서 취약점 발견됨.
계정 탈취 및 민감한 정보에로의 접근 가능케 해주는 것.
패치를 하거나 브라우저로 트위터 사용하는 것이 안전.
- https://www.boannews.com/media/view.asp?idx=85391

2. 중국의 APT20, 2년 동안 10여개 국에서 스파이 활동 벌여
[요약]
중국의 APT 단체인 APT20, 2년 동안 10여개국 노리며 스파이 활동 벌임.
중국 정부의 경제적 프로젝트를 도우려는 것이 가장 큰 목적일 듯.
중국은 현재 사이버 공격자들을 규합해 나라의 경제를 일으키려고 하고 있음.
- https://www.boannews.com/media/view.asp?idx=85364

3. 한국 제조업 시설, 200여곳 APT 감염…미래 공격용 '포석'?
[요약]
제철과 화학 등 국내 제조업 시설 200여곳이 지능형지속위협공격에 감염된 것으로 확인.
공격자는 이들 시설에 대한 거래 기밀과 지재권(IP) 등 내부 문서, 비밀번호를 탈취하면서 추후 공격을 위한 정찰을 수행.
압축파일 등 이메일 첨부파일을 클릭하기 전 의심해야 하며 악성코드 식별을 위해 엔드포인트 보안 강화 조치 등이 권고.
- http://www.etnews.com/20191223000115

=================================================