按 Enter 到主內容區
:::

TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報

:::

7/15至7/21 Known Exploited Vulnerabilities Catalog(KEV)週報

發布日期：
字型大小：
  • 發布單位:TWCERT/CC
  • 更新日期:2024-08-07
  • 點閱次數:357
  • 內容說明：

CISA於7/15至7/21在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

  • 影響平台：

OSGeo | GeoServer GeoTools
VMware | VCenter Server
SolarWinds | SERV-U
Adobe | Commerce and Magento Open Source

 

  • 處置建議：

補說明請參考以下官方連結：
OSGeo | GeoServer GeoTools
此漏洞影響產品為開源套件，實際修補方式請參考各家廠商的說明，需要更多資訊可參考以下網址：
https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv
https://github.com/geotools/geotools/pull/4797
VMware | VCenter Server
https://www.vmware.com/security/advisories/VMSA-2022-0009.html
SolarWinds | SERV-U
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995
Adobe | Commerce and Magento Open Source
https://helpx.adobe.com/security/products/magento/apsb24-40.html

 

  • CVE編號：

CVE-2022-22948
CVE-2024-28995
CVE-2024-34102
CVE-2024-36401

相關連結

  1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  2. https://nvd.nist.gov/vuln/detail/CVE-2022-22948
  3. https://nvd.nist.gov/vuln/detail/CVE-2024-28995
  4. https://nvd.nist.gov/vuln/detail/CVE-2024-34102
  5. https://nvd.nist.gov/vuln/detail/CVE-2024-36401
  6. https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv
  7. https://github.com/geotools/geotools/pull/4797
  8. https://www.vmware.com/security/advisories/VMSA-2022-0009.html
  9. https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995
  10. https://helpx.adobe.com/security/products/magento/apsb24-40.html
回頁首