¡¾·ì϶¹«¸æ¡¿IBM Security Verify DirectoryºÅÁîÖ´Ðзì϶(CVE-2024-51450)
°ä²¼¹¦·ò 2025-02-11Ò»¡¢·ì϶¸ÅÊö
·ìϼûû³Æ | IBM Security Verify DirectoryºÅÁîÖ´Ðзì϶ | ||
CVE ID | CVE-2024-51450 | ||
·ì϶ÀàÐÍ | ºÅÁîÖ´ÐÐ | ·¢ÏÖ¹¦·ò | 2025-02-11 |
·ì϶ÆÀ·Ö | 9.1 | ·ì϶µÈ¼¶ | ÑϳÁ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ¸ß |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ÎÞ |
PoC/EXP | δ¹«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
IBM Security Verify DirectoryÊÇÒ»¿îÆóÒµ¼¶Éí·ÝºÍ½Ó¼ûÖÎÀí½â¾ö¹æ»®£¬£¬£¬£¬£¬£¬£¬Ìṩ°²È«µÄÓû§Éí·ÝÖÎÀíºÍĿ¼·þÎñ£¬£¬£¬£¬£¬£¬£¬Ö§³Ö¸´ÔÓµÄÈÏÖ¤ºÍÊÚȨÐèÒª£¬£¬£¬£¬£¬£¬£¬Ô®ÊÖ×éÖ¯± £» £»£»£» £»£»£»¤Ãô¸ÐÊý¾Ý¡£¡£¡£¡£¡£¡£IBM Security Verify Access ApplianceÊÇÒ»¿îÓÃÓÚÖÎÀíÆóÒµÀûÓ÷¨Ê½½Ó¼ûµÄ½â¾ö¹æ»®£¬£¬£¬£¬£¬£¬£¬ÌṩÉí·ÝÑéÖ¤¡¢µ¥µãµÇ¼¡¢È¨ÏÞ½ÚÔìºÍ¶à³É·ÖÈÏÖ¤Ö°ÄÜ¡£¡£¡£¡£¡£¡£Á½Õßͨ¹ý¼¯ÖÐÖÎÀíÓû§½Ó¼ûȨÏ޺Ͱ²È«Õ½Êõ£¬£¬£¬£¬£¬£¬£¬È·±£ÆóÒµÀûÓõݲȫÐÔÓëºÏ¹æÐÔ£¬£¬£¬£¬£¬£¬£¬¿í·ºÀûÓÃÓÚÌáÉý×éÖ¯µÄÍøÂ簲ȫÐÔºÍÓû§ÖÎÀíЧÄÜ¡£¡£¡£¡£¡£¡£
2025Äê2ÔÂ11ÈÕ£¬£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½IBM°ä²¼Á˹ØÓÚCVE-2024-51450ºÍCVE-2024-49814·ì϶µÄ°²È«²¼¸æ¡£¡£¡£¡£¡£¡£IBM°²È«Ñé֤Ŀ¼£¨IBM Security Verify Directory£©ºÍ°²È«ÑéÖ¤½Ó¼ûÉ豸£¨IBM Security Verify Access Appliance£©´æÔÚÁ½¸öÑϳÁ·ì϶£¬£¬£¬£¬£¬£¬£¬¿ÉÄܱ»¹¥»÷ÕßÀûÓ㬣¬£¬£¬£¬£¬£¬µ¼ÖÂδÊÚȨ½Ó¼ûºÍºÅÁîÖ´ÐС£¡£¡£¡£¡£¡£CVE-2024-51450ÊÇÒ»¸öÔ¶³ÌºÅÁî×¢Èë·ì϶£¬£¬£¬£¬£¬£¬£¬ÔÊÐíÔ¶³Ì¾¹ýÉí·ÝÑéÖ¤µÄ¹¥»÷Õßͨ¹ý·¢Ë;«ÐÄ»ú¹ØµÄÒªÇ󣬣¬£¬£¬£¬£¬£¬ÔÚϵͳÉÏÖ´ÐÐËÁÒâºÅÁ£¬£¬£¬£¬£¬£¬CVSSÆÀ·ÖΪ9.1£¬£¬£¬£¬£¬£¬£¬·ì϶¼¶±ðÑϳÁ¡£¡£¡£¡£¡£¡£CVE-2024-49814ÊÇÒ»¸ö±¾µØȨÏÞÌáÉý·ì϶£¬£¬£¬£¬£¬£¬£¬ÔÊÐí¾¹ýÉí·ÝÑéÖ¤µÄÓû§Í¨¹ý²»ÓÃÒªµÄȨÏÞÖ´ÐвÙ×÷£¬£¬£¬£¬£¬£¬£¬´Ó¶ø»ñµÃ¸ü¸ßȨÏÞ£¬£¬£¬£¬£¬£¬£¬¿ÉÄÜÆëÈ«½ÚÔìϵͳ£¬£¬£¬£¬£¬£¬£¬CVSSÆÀ·ÖΪ7.8£¬£¬£¬£¬£¬£¬£¬·ì϶¼¶±ð¸ßΣ¡£¡£¡£¡£¡£¡£
¶þ¡¢Ó°ÏìÁìÓò
10.0.0<=IBM Security Verify Directory<=10.0.3
Èý¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
ÏÂÔز¢×°ÖÃIBM Security Verify Directory°æ±¾10.0.3.1ÒÔ½â¾öÓйذ²È«ÎÊÌâ¡£¡£¡£¡£¡£¡£
3.2 һʱ´ëÊ©
ÔÝÎÞ¡£¡£¡£¡£¡£¡£
3.3 ͨÓý¨Òé
3.4 ²Î¿¼Á´½Ó
https://www.ibm.com/support/pages/node/7182558
¾©¹«Íø°²±¸11010802024551ºÅ