{"id":100922,"date":"2021-08-05T16:22:55","date_gmt":"2021-08-05T14:22:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oczenka-ispolzovaniya-uyazvimyh-otkrytyh-komponentov-v-kommercheskom-po"},"modified":"2021-08-05T16:22:55","modified_gmt":"2021-08-05T14:22:56","slug":"oczenka-ispolzovaniya-uyazvimyh-otkrytyh-komponentov-v-kommercheskom-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/oczenka-ispolzovaniya-uyazvimyh-otkrytyh-komponentov-v-kommercheskom-po","title":{"rendered":"\u00c9valuation de l'utilisation de composants ouverts vuln\u00e9rables dans les logiciels commerciaux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 Osterman Research a publi\u00e9 les r\u00e9sultats d'une enqu\u00eate sur l'utilisation de composants ouverts avec des vuln\u00e9rabilit\u00e9s non corrig\u00e9es dans les logiciels propri\u00e9taire d\u00e9velopp\u00e9s sur mesure (COTS). L'\u00e9tude a examin\u00e9 cinq cat\u00e9gories d'applications \u2014 navigateurs web, clients de messagerie, programmes de partage de fichiers, messageries et plateformes de r\u00e9unions en ligne. <\/p>\n

Les r\u00e9sultats se sont r\u00e9v\u00e9l\u00e9s pr\u00e9occupants \u2014 dans toutes les applications \u00e9tudi\u00e9es, on a constat\u00e9 l'utilisation de code ouvert avec des vuln\u00e9rabilit\u00e9s non corrig\u00e9es, et dans 85 % des applications, les vuln\u00e9rabilit\u00e9s \u00e9taient critiques. Le plus de probl\u00e8mes a \u00e9t\u00e9 trouv\u00e9 dans les applications de r\u00e9unions en ligne et dans les clients de messagerie. <\/p>\n

En ce qui concerne le code ouvert, 30 % de tous les composants ouverts d\u00e9tect\u00e9s pr\u00e9sentaient au moins une vuln\u00e9rabilit\u00e9 connue mais non corrig\u00e9e. La majorit\u00e9 des probl\u00e8mes identifi\u00e9s (75,8 %) \u00e9taient li\u00e9s \u00e0 l'utilisation de versions obsol\u00e8tes du moteur Firefox. En deuxi\u00e8me position se trouve openssl (9,6 %), suivi par libav (8,3 %).

\"\u00c9valuation<\/center> <\/p>\n

Le rapport ne pr\u00e9cise pas le nombre d'applications examin\u00e9es ni quels produits sp\u00e9cifiques ont \u00e9t\u00e9 \u00e9tudi\u00e9s. Cependant, il est mentionn\u00e9 que des probl\u00e8mes critiques ont \u00e9t\u00e9 identifi\u00e9s dans toutes les applications, \u00e0 l'exception de trois, c'est-\u00e0-dire que les conclusions ont \u00e9t\u00e9 tir\u00e9es \u00e0 partir de l'analyse de 20 applications, ce qui ne peut pas \u00eatre consid\u00e9r\u00e9 comme un \u00e9chantillon repr\u00e9sentatif. Rappelons que dans une \u00e9tude similaire men\u00e9e en juin, il a \u00e9t\u00e9 conclu que 79% des biblioth\u00e8ques tierces int\u00e9gr\u00e9es dans le code ne sont jamais mises \u00e0 jour et que le code obsol\u00e8te des biblioth\u00e8ques cause des probl\u00e8mes de s\u00e9curit\u00e9.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Osterman Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u0437\u0430\u043a\u0430\u0437 (COTS). \u0412 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u044b \u043f\u044f\u0442\u044c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 — web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f online-\u0432\u0441\u0442\u0440\u0435\u0447. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043b\u0430\u0447\u0435\u0432\u043d\u044b — \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100923,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100922","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c9valuation de l'utilisation de composants ouverts vuln\u00e9rables dans les logiciels commerciaux | ProHoster","description":"La soci\u00e9t\u00e9 Osterman Research a publi\u00e9 les r\u00e9sultats d'une v\u00e9rification de l'utilisation de composants ouverts avec des vuln\u00e9rabilit\u00e9s non corrig\u00e9es dans des logiciels propri\u00e9taires d\u00e9velopp\u00e9s sur mesure (COTS).","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/oczenka-ispolzovaniya-uyazvimyh-otkrytyh-komponentov-v-kommercheskom-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0446\u0435\u043d\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0432 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c \u041f\u041e | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Osterman Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u0437\u0430\u043a\u0430\u0437 (COTS).","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/oczenka-ispolzovaniya-uyazvimyh-otkrytyh-komponentov-v-kommercheskom-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-05T14:22:56+00:00","article:modified_time":"2021-08-05T14:22:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100922","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-05 14:39:19","updated":"2022-10-01 01:58:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/100922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=100922"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/100922\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/100923"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=100922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=100922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=100922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}