2020년 1월 31일 보안정보 스크래핑

1월 31일 보안정보 스크래핑

=================================================

+ 주요 취약점 - Cisco, Small Business Switch에 대한 보안 업데이트 발표

1. Cisco, Small Business Switch에 대한 보안 업데이트 발표
원격 공격자는이 취약점 중 하나를 악용하여 중요한 정보를 얻을 수 있음
- https://www.us-cert.gov/ncas/current-activity/2020/01/30/cisco-releases-security-updates-cisco-small-business-switches

=================================================

+ 취약점 - Joomla 취약점 외 1건

1. Joomla 취약점
Joomla actionlogs username cross-site scripting (CVE-2020-8421)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175401

Joomla LESS compiler cross-site request forgery (CVE-2020-8420)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175401

Joomla batch actions cross-site request forgery (CVE-2020-8419)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175400

2. Jenkins 취약점
Jenkins WebSphere Deployer Plugin information disclosure (CVE-2020-2108)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175370

Jenkins Fortify Plugin information disclosure (CVE-2020-2107)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175369

Jenkins Code Coverage API Plugin cross-site scripting (CVE-2020-2106)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175368

Jenkins weekly and LTS clickjacking (CVE-2020-2105)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175367

Jenkins weekly and LTS information disclosure (CVE-2020-2104)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175366

Jenkins weekly and LTS cross-site scripting (CVE-2020-2103)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175365

Jenkins weekly and LTS information disclosure (CVE-2020-2102)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175364

Jenkins weekly and LTS information disclosure (CVE-2020-2101)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175363

Jenkins weekly and LTS denial of service (CVE-2020-2100)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175362

Jenkins weekly and LTS security bypass (CVE-2020-2099)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175344

=================================================

+ 보안이슈 - 인텔의 CPU에서 발견된 또 다른 공격 방법, 캐시아웃 외 2건

1. 인텔의 CPU에서 발견된 또 다른 공격 방법, 캐시아웃
인텔 CPU에서 또 다른 추측 실행 관련 공격법 발견됨.
이 공격법은 캐시아웃이라고 하며, 두 가지 취약점을 통해 성립됨.
인텔은 패치가 곧 나오는 중이라고 하며, 위험도가 높지 않다고 말함.
- https://www.boannews.com/media/view.asp?idx=86056

2. BSD 및 리눅스 배포판 다수에 영향을 미치는 OpenSMTPD 라이브러리 내 CVE-2020-7247 RCE 취약점 발견
CVE-2020-7247 취약점은 원격 공격자가 악용할 경우 OpenSMTPD 클라이언트를 사용하는 서버에서 루트 권한으로 임의 코드를 실행할 수 있는 로컬 권한 상승 문제 및 원격 코드 실행 취약점
- https://securityaffairs.co/wordpress/96986/security/cve-2020-7247-opensmtpd-flaw.html

3. ICS 프로세스를 노리는 새로운 Snake 랜섬웨어 발견
Snake 랜섬웨어는 Golang 프로그래밍 언어로 작성되었으며, 전 세계 기업을 노리는 공격에 사용되
- https://www.bloomberg.com/news/articles/2020-01-28/-snake-ransomware-linked-to-iran-targets-industrial-controls

=================================================