Hloov cov lej tsis zoo rau hauv Ruby pob Strong_password kuaj pom

Π’ luam tawm Lub Rau Hli 25 tso tawm pob pov pob zeb Strong_password 0.7 qhia tawm kev hloov siab phem (CVE-2019-13354), rub tawm thiab ua tiav cov cai sab nraud tswj los ntawm tus tsis paub tus neeg tawm tsam, tuav ntawm Pastebin kev pabcuam. Tag nrho cov downloads ntawm qhov project yog 247 txhiab, thiab version 0.6 yog txog 38 txhiab. Rau lub siab phem version, tus naj npawb ntawm downloads yog teev raws li 537, tab sis nws tsis meej meej npaum li cas qhov no yog, vim hais tias qhov kev tso tawm no twb tau raug tshem tawm ntawm Ruby Gems.

Lub tsev qiv ntawv Strong_password muab cov cuab yeej los kuaj xyuas lub zog ntawm tus password uas tau teev tseg los ntawm tus neeg siv thaum sau npe.
Ntawm cov siv cov pob Strong_password think_feel_do_engine (65 txhiab rub tawm), think_feel_do_dashboard (15 txhiab rub tawm) thiab
superhosting (1.5 txhiab). Nws raug sau tseg tias qhov kev hloov pauv tsis zoo tau ntxiv los ntawm ib tus neeg tsis paub uas tau txeeb tswj hwm lub chaw khaws cia los ntawm tus sau.

Cov lej phem tau ntxiv rau RubyGems.org nkaus xwb, Git repository qhov project tsis cuam tshuam. Qhov teeb meem tau txheeb xyuas tom qab ib tus neeg tsim tawm, uas siv Strong_password hauv nws cov haujlwm, pib paub tias vim li cas qhov kev hloov pauv zaum kawg tau ntxiv rau hauv qhov chaw cia ntau dua 6 lub hlis dhau los, tab sis qhov kev tso tawm tshiab tau tshwm sim ntawm RubyGems, luam tawm sawv cev ntawm tus tshiab. tus saib xyuas, txog tus uas tsis muaj leej twg tau hnov ​​ua ntej kuv tsis hnov ​​dab tsi.

Tus neeg tawm tsam tuaj yeem ua tiav qhov kev txiav txim siab ntawm cov servers siv qhov teeb meem version ntawm Strong_password. Thaum pom muaj teeb meem nrog Pastebin, ib tsab ntawv raug thauj khoom los khiav ib qho chaws dhau los ntawm tus neeg siv khoom ntawm ncuav qab zib "__id" thiab encoded siv txoj kev Base64. Cov cai tsis zoo kuj tau xa cov kev txwv ntawm tus tswv tsev uas qhov tsis zoo Strong_password variant tau teeb tsa rau lub server tswj los ntawm tus neeg tawm tsam.

Hloov cov lej tsis zoo rau hauv Ruby pob Strong_password kuaj pom

Hloov cov lej tsis zoo rau hauv Ruby pob Strong_password kuaj pom

Tau qhov twg los: opennet.ru

Ntxiv ib saib