{"id":93140,"date":"2020-09-03T07:42:03","date_gmt":"2020-09-03T05:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-wordpress-plagine-file-manager-imeyushhem-700-tysyach-ustanovok"},"modified":"2020-09-03T07:42:03","modified_gmt":"2020-09-03T05:42:03","slug":"kriticheskaya-uyazvimost-v-wordpress-plagine-file-manager-imeyushhem-700-tysyach-ustanovok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/kriticheskaya-uyazvimost-v-wordpress-plagine-file-manager-imeyushhem-700-tysyach-ustanovok","title":{"rendered":"Kriitiline haavatavus WordPressi pistikprogrammis File Manager, mida on installeeritud 700 000 korda","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

WordPressi pistikprogrammis File Manager<\/a><\/noindex>, millel on rohkem kui 700 000 aktiivset installeerimist, tuvastatud<\/a><\/noindex> on haavatavus, mis v\u00f5imaldab k\u00e4ivitada mis tahes k\u00e4ske ja PHP skripte serveris. Probleem ilmneb File Manageri v\u00e4ljaannetes alates 6.0 kuni 6.8 ja on k\u00f5rvaldatud v\u00e4ljaandes 6.9. <\/p>\n

Pistikprogramm File Manager pakub t\u00f6\u00f6riistu WordPressi administraatori failide haldamiseks, kasutades madalama taseme failimanipulatsioonide jaoks kaasasolevat teeki elFinder<\/a><\/noindex>. ElFinder'i teegi all olevates l\u00e4htekoodifailides on n\u00e4idisfailid, mis on kaasatud t\u00f6\u00f6kausta laiendiga «.dist». Haavatavus tuleneb sellest, et teegi tarnimisel nimetati fail «connector.minimal.php.dist» \u00fcmber nimeks «connector.minimal.php» ja see sai v\u00e4liste p\u00e4ringute saatmisel k\u00e4itatavaks. Antud skript v\u00f5imaldab teostada mis tahes toiminguid failidega (\u00fcleslaadimine, avamine, redigeerimine, \u00fcmbernimetamine, kustutamine jne), kuna tema parameetrid edastatakse funktsioonile run() peamise pistikprogrammi sees, mis v\u00f5ib v\u00f5imaldada PHP-failide asendamist WordPressis ja juhusliku koodi k\u00e4ivitamist.<\/p>\n

Oht s\u00fcveneb veelgi, et haavatavus on juba kasutatakse<\/a><\/noindex> automaatsete r\u00fcnnakute l\u00e4biviimiseks, mille k\u00e4igus laaditakse katalooge «plugins\/wp-file-manager\/lib\/files\/» k\u00e4suga «upload» \u00fcles pilt, mis sisaldab PHP-koodi, mis seej\u00e4rel nimetatakse \u00fcmber PHP-skriptiks, mille nimi valitakse juhuslikult ja sisaldab teksti «hard» v\u00f5i «x.», n\u00e4iteks hardfork.php, hardfind.php, x.php jne). P\u00e4rast PHP-koodi k\u00e4ivitamist lisab see tagauksed failidesse \/wp-admin\/admin-ajax.php ja \/wp-includes\/user.php, andes r\u00fcnnakutele juurdep\u00e4\u00e4su saidi administraatori liidesele. \u00c4rakasutamine toimub POST-p\u00e4ringu saatmise kaudu faili «wp-file-manager\/lib\/php\/connector.minimal.php». <\/p>\n

On t\u00e4helepanuv\u00e4\u00e4rne, et p\u00e4rast h\u00e4kkimist, peale tagaukse j\u00e4tmise, tehakse muudatusi ka selleks, et kaitsta edasiste p\u00f6\u00f6rdumiste eest faili connector.minimal.php, milles on haavatavus, eesm\u00e4rgiga blokeerida v\u00f5imalus r\u00fcnnata serverit teiste h\u00e4kkerite poolt.
\nEsimesed katse r\u00fcnnakud tuvastati 1. septembril kell 7 hommikul (UTC). V
\n12:33 (UTC) vabastas File Manageri pistikprogrammi arendajad plaastrid. Vastavalt haavatavuse avastanud ettev\u00f5tte Wordfence andmetele blokeeris nende tulem\u00fc\u00fcr p\u00e4eva jooksul umbes 450 tuhat katset haavatavust \u00e4ra kasutada. V\u00f5rgus skaneerimine n\u00e4itas, et 52% saididest, mis kasutavad antud pistikprogrammi, ei ole endiselt uuendatud ja j\u00e4\u00e4vad haavatavaks. P\u00e4rast uuenduse installimist on m\u00f5istlik kontrollida http-serveri logisid skripti «connector.minimal.php» osas, et tuvastada s\u00fcsteemi v\u00f5imalik kompromiteerimine.<\/p>\n

Samuti tasub m\u00e4rkida korrektuuri v\u00e4ljaande WordPress 5.5.1<\/a><\/noindex> milles on pakutud 40 parandust<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 File Manager, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0431\u043e\u043b\u0435\u0435 700 \u0442\u044b\u0441\u044f\u0447 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 PHP-\u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 File Manager \u0441 6.0 \u043f\u043e 6.8 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 6.9. \u041f\u043b\u0430\u0433\u0438\u043d File Manager \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043b\u044f \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0443\u044e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-93140","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kriitiline haavand WordPressi pistikprogrammis File Manager, millel on 700 tuhat paigaldust | ProHoster","description":"WordPressi Lisa Manageri pistikprogrammil on \u00fcle 700 000 aktiivse paigaldamise.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/kriticheskaya-uyazvimost-v-wordpress-plagine-file-manager-imeyushhem-700-tysyach-ustanovok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 File Manager, \u0438\u043c\u0435\u044e\u0449\u0435\u043c 700 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a | ProHoster","og:description":"\u0412 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 File Manager, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0431\u043e\u043b\u0435\u0435 700 \u0442\u044b\u0441\u044f\u0447 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a,","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/kriticheskaya-uyazvimost-v-wordpress-plagine-file-manager-imeyushhem-700-tysyach-ustanovok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-03T05:42:03+00:00","article:modified_time":"2020-09-03T05:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93140","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:54:01","updated":"2022-10-04 10:43:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=93140"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/93140\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=93140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=93140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=93140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}