2020년 3월 3일 보안정보 스크래핑

3월 3일 보안정보 스크래핑 

==================================================================== 

+ 주요 취약점 - 특이사항 없음

==================================================================== 

+ 취약점 - Microsoft Exchange 2019 15.2.221.12 Remote Code Execution 외 3건

 1. Microsoft Exchange 2019 15.2.221.12 Remote Code Execution
Exploit Type: code execution vulnerability
- https://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html

 2. WordPress Tutor LMS 1.5.3 Cross Site Request Forgery
Exploit Type: cross site request forgery vulnerability
- https://packetstormsecurity.com/files/156585/WordPress-Tutor-LMS-1.5.3-Cross-Site-Request-Forgery.html

 3. macOS / iOS ImageIO OpenEXR Image Processing Memory Issues
Exploit Type: memory safety issues
- https://packetstormsecurity.com/files/156596/macOS-iOS-ImageIO-OpenEXR-Image-Processing-Memory-Issues.html

 4. Node.js react-oauth-flow module information disclosure
Exploit Type: information disclosure
- https://exchange.xforce.ibmcloud.com/vulnerabilities/177032

==================================================================== 

+ 보안이슈 - 한글 이력서 위장 악성메일 유포! 北 추정 김수키 조직의 계속되는 APT 공격 외 2건 

 1. 한글 이력서 위장 악성메일 유포! 北 추정 김수키 조직의 계속되는 APT 공격
지난해 말부터 계속된 ‘블루 에스티메이트’ 공격 캠페인의 일환으로 추정
북한 추정 김수키 조직 소행 가능성 높아... 이메일 수신시 각별한 주의 필요
출처: 보안뉴스 (https://www.boannews.com/media/view.asp?idx=86737)

 2. Windows 10 KB4535996 causes freezes, installation issues
Windows 10 KB4535996 업데이트 이후 피시가 멈추거나 블루스크린이 발생하는 이슈 발생
아직까진 해당 KB4535996 패치를 수동으로 제거하는 방법 밖엔 없어
출처: windowslatest (https://www.windowslatest.com/2020/03/01/windows-10-kb4535996-issues/)

 3. 클라우드 보안 방화벽 우회 '악성코드' 주의
소포스 발표…"국가 후원받는 조직 공격 추정"
출처: 아이뉴스24 (http://www.inews24.com/view/1246531)

====================================================================