BDU:2020-03624
Vulnerability from fstec - Published: 13.04.2020
VLAI Severity ?
Title
Уязвимость реализации класса SmtpAppender библиотеки журналирования Java-программ Log4j, позволяющая нарушителю реализовать атаку типа «человек посередине»
Description
Уязвимость реализации класса SmtpAppender библиотеки журналирования Java-программ Log4j связана с неправильным подтверждением подлинности сертификата. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, реализовать атаку типа «человек посередине»
Severity ?
Vendor
Red Hat Inc., Oracle Corp., Apache Software Foundation, Cisco Systems Inc., АО «Концерн ВНИИНС»
Software Name
Red Hat Enterprise Linux, WebLogic Server, Enterprise Repository, Fusion Middleware MapViewer, Primavera Unifier, PeopleSoft Enterprise PeopleTools, Oracle Retail Customer Management and Segmentation Foundation, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, Oracle Data Integrator, Jboss Fuse, Utilities Framework, Application Testing Suite, OpenShift Application Runtimes, Oracle Policy Automation Connector for Siebel, JBoss Data Grid, Red Hat Single Sign-On, Red Hat Process Automation Manager, Oracle Communications Unified Inventory Management, Red Hat Descision Manager, Oracle Retail Assortment Planning, JBoss A-MQ Streaming, Oracle Communications Interactive Session Recorder, Oracle Endeca Information Discovery Studio, Oracle Retail Predictive Application Server, Retail Integration Bus, Primavera Gateway, Oracle Retail Financial Integration, Financial Services Price Creation and Discovery, Oracle Retail Service Backbone, Rapid Planning, Enterprise Manager Ops Center, Communications MetaSolv Solution, Oracle Communications Order and Service Management, Financial Services Analytical Applications Infrastructure, Oracle FLEXCUBE Investor Servicing, Oracle FLEXCUBE Private Banking, Oracle Banking Enterprise Collections, Category Management Planning & Optimization, Oracle Retail Bulk Data Integration, Oracle Retail Data Extractor for Merchandising, Oracle Retail Item Planning, Oracle Retail Macro Space Optimization, Oracle Retail Merchandise Financial Planning, Oracle Retail Regular Price Optimization, Oracle Retail Replenishment Optimization, Oracle Retail Size Profile Optimization, Retail Store Inventory Management, Communications Instant Messaging Server, Communications Network Charging and Control, Communications Billing and Revenue Management, Siebel Engineering - Installer & Deployment, Log4j, A-MQ Clients, JD Edwards EnterpriseOne Tools, Oracle Communications Network Integrity, Oracle Financial Services Lending and Leasing, Banking Platform, Oracle Insurance Data Gateway, Oracle Retail Extract Transform and Load, Data Grid, Oracle Communications Services Gatekeeper, Financial Services Retail Customer Analytics, Insurance Policy Administration J2EE, Insurance Insbridge Rating and Underwriting, Hyperion Infrastructure Technology, FLEXCUBE Core Banking, Oracle GoldenGate Application Adapters, Communications Application Session Controller, Oracle Policy Automation, Oracle Policy Automation for Mobile Devices, Oracle Insurance Rules Palette, Retail Advanced Inventory Planning, Siebel UI Framework, Oracle Health Sciences Information Manager, StorageTek Tape Analytics SW Tool, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177)
Software Version
7 (Red Hat Enterprise Linux), 10.3.6.0.0 (WebLogic Server), 12.1.3.0.0 (WebLogic Server), 11.1.1.7.0 (Enterprise Repository), 12.2.1.3.0 (Fusion Middleware MapViewer), 16.2 (Primavera Unifier), 16.1 (Primavera Unifier), 8.56 (PeopleSoft Enterprise PeopleTools), 8.57 (PeopleSoft Enterprise PeopleTools), 12.2.1.3.0 (WebLogic Server), 16.0 (Oracle Retail Customer Management and Segmentation Foundation), 17.0 (Oracle Retail Customer Management and Segmentation Foundation), 18.0 (Oracle Retail Customer Management and Segmentation Foundation), 15.0 (Oracle Retail Order Broker), 16.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 17.3 (Instantis EnterpriseTrack), 6.2.1 (Agile Engineering Data Management), 8 (Red Hat Enterprise Linux), 12.2.1.3.0 (Oracle Data Integrator), 7 (Jboss Fuse), 4.4.0.0.0 (Utilities Framework), 4.2.0.3.0 (Utilities Framework), 4.2.0.2.0 (Utilities Framework), 13.3.0.1 (Application Testing Suite), 18.8 (Primavera Unifier), 1.0 (OpenShift Application Runtimes), 10.4.6 (Oracle Policy Automation Connector for Siebel), 7 (JBoss Data Grid), 7 (Red Hat Single Sign-On), 7 (Red Hat Process Automation Manager), 12.2.1.4.0 (WebLogic Server), 7.3 (Oracle Communications Unified Inventory Management), 7.4 (Oracle Communications Unified Inventory Management), 7 (Red Hat Descision Manager), 16.0.3 (Oracle Retail Assortment Planning), - (JBoss A-MQ Streaming), 19.12 (Primavera Unifier), от 17.7 до 17.12 включительно (Primavera Unifier), 6.1 (Oracle Communications Interactive Session Recorder), 6.2 (Oracle Communications Interactive Session Recorder), 6.3 (Oracle Communications Interactive Session Recorder), 3.2.0 (Oracle Endeca Information Discovery Studio), 15.0.3 (Oracle Retail Predictive Application Server), 16.0.3 (Oracle Retail Predictive Application Server), 18.0 (Oracle Retail Order Broker), 15.0 (Retail Integration Bus), 16.0 (Retail Integration Bus), 8.58 (PeopleSoft Enterprise PeopleTools), 15.0.3 (Oracle Retail Assortment Planning), от 16.2.0 до 16.2.11 включительно (Primavera Gateway), 15.0 (Oracle Retail Financial Integration), 16.0 (Oracle Retail Financial Integration), 8.0.7 (Financial Services Price Creation and Discovery), 14.1.0 (Retail Integration Bus), 14.0.3 (Oracle Retail Predictive Application Server), 14.1.3 (Oracle Retail Predictive Application Server), 15.0 (Oracle Retail Service Backbone), 16.0 (Oracle Retail Service Backbone), 12.1 (Rapid Planning), 12.2 (Rapid Planning), 14.1.1.0.0 (WebLogic Server), 12.4.0.0 (Enterprise Manager Ops Center), 6.3.0 (Communications MetaSolv Solution), 7.3 (Oracle Communications Order and Service Management), 7.4 (Oracle Communications Order and Service Management), от 8.0.6 до 8.1.0 включительно (Financial Services Analytical Applications Infrastructure), 12.1.0 (Oracle FLEXCUBE Investor Servicing), 12.3.0 (Oracle FLEXCUBE Investor Servicing), 12.4.0 (Oracle FLEXCUBE Investor Servicing), 14.0.0 (Oracle FLEXCUBE Investor Servicing), 14.1.0 (Oracle FLEXCUBE Investor Servicing), 12.0.0 (Oracle FLEXCUBE Private Banking), 12.1.0 (Oracle FLEXCUBE Private Banking), от 2.7.0 до 2.9.0 включительно (Oracle Banking Enterprise Collections), 15.0.3 (Category Management Planning & Optimization), 15.0 (Oracle Retail Bulk Data Integration), 16.0 (Oracle Retail Bulk Data Integration), 1.9 (Oracle Retail Data Extractor for Merchandising), 1.10 (Oracle Retail Data Extractor for Merchandising), 15.0.3 (Oracle Retail Item Planning), 15.0.3 (Oracle Retail Macro Space Optimization), 15.0.3 (Oracle Retail Merchandise Financial Planning), 15.0.3 (Oracle Retail Regular Price Optimization), 16.0.3 (Oracle Retail Regular Price Optimization), 15.0.3 (Oracle Retail Replenishment Optimization), 15.0.3 (Oracle Retail Size Profile Optimization), 14.0.4 (Retail Store Inventory Management), 14.1.3 (Retail Store Inventory Management), 15.0.3 (Retail Store Inventory Management), 16.0.3 (Retail Store Inventory Management), 10.0.1.4.0 (Communications Instant Messaging Server), от 17.12.0 до 17.12.7 включительно (Primavera Gateway), от 18.8.0 до 18.8.9 включительно (Primavera Gateway), от 19.12.0 до 19.12.4 включительно (Primavera Gateway), 6.0.1 (Communications Network Charging and Control), от 12.0.0 до 12.0.3 включительно (Communications Network Charging and Control), 7.5.0.23.0 (Communications Billing and Revenue Management), 12.0.0.3.0 (Communications Billing and Revenue Management), до 2.20.5 включительно (Siebel Engineering - Installer & Deployment), до 2.13.2 (Log4j), 6.4 (Oracle Communications Interactive Session Recorder), 2 (A-MQ Clients), до 9.2.3.3 (JD Edwards EnterpriseOne Tools), от 7.3.2 до 7.3.6включительно (Oracle Communications Network Integrity), 12.5.0 (Oracle Financial Services Lending and Leasing), от 14.1.0 до 14.8.0 включительно (Oracle Financial Services Lending and Leasing), 12.2.1.4.0 (Fusion Middleware MapViewer), 2.4.0-2.10.0 (Banking Platform), 1.0 (Oracle Insurance Data Gateway), 18.0 (Oracle Retail Data Extractor for Merchandising), 19.0 (Oracle Retail Extract Transform and Load), 14.1 (Oracle Retail Service Backbone), 8 (Data Grid), 7.0 (Oracle Communications Services Gatekeeper), 2.2.0.0.0 (Utilities Framework), от 4.3.0.1.0 до 4.3.0.6.0 включительно (Utilities Framework), 8.0.6 (Financial Services Price Creation and Discovery), 8.0.6 (Financial Services Retail Customer Analytics), 11.0.2.25 (Insurance Policy Administration J2EE), 11.1.0.15 (Insurance Policy Administration J2EE), от 5.0.0.0 до 5.6.0.0 включительно (Insurance Insbridge Rating and Underwriting), 5.6.1.0 (Insurance Insbridge Rating and Underwriting), 11.1.2.4 (Hyperion Infrastructure Technology), 5.2.0 (FLEXCUBE Core Banking), от 11.5.0 до 11.7.0 включительно (FLEXCUBE Core Banking), 19.1.0.0.0 (Oracle GoldenGate Application Adapters), 3.9m0p1 (Communications Application Session Controller), 4.4.0.2.0 (Utilities Framework), от 12.2.0 до 12.2.20 включительно (Oracle Policy Automation), от 12.2.0 до 12.2.20 включительно (Oracle Policy Automation for Mobile Devices), 19.0 (Oracle Retail Customer Management and Segmentation Foundation), 10.2.0.37 (Insurance Policy Administration J2EE), 10.2.4.12 (Insurance Policy Administration J2EE), 11.2.0.26 (Insurance Policy Administration J2EE), 10.2.0.37 (Oracle Insurance Rules Palette), 10.2.4.12 (Oracle Insurance Rules Palette), 11.0.2.25 (Oracle Insurance Rules Palette), 11.1.0.15 (Oracle Insurance Rules Palette), 11.2.0.26 (Oracle Insurance Rules Palette), 14.1 (Retail Advanced Inventory Planning), 15.0.3.0 (Oracle Retail Bulk Data Integration), 16.0.3.0 (Oracle Retail Bulk Data Integration), от 19.0 до 19.3 включительно (Oracle Retail Order Broker), до 20.12 включительно (Siebel UI Framework), 12.2.1.4.0 (Oracle Data Integrator), 3.0.1 (Oracle Health Sciences Information Manager), 2.3.1 (StorageTek Tape Analytics SW Tool), до 16.01.2023 (ОС ОН «Стрелец»)
Possible Mitigations
Использование рекомендаций:
Для Log4j:
https://issues.apache.org/jira/browse/LOG4J2-2819
Для программных продуктов Oracle Corp.:
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2020-9488
Для ОС ОН «Стрелец»:
Обновление программного обеспечения apache-log4j2 до версии 2.12.4-0+deb9u1
Reference
https://issues.apache.org/jira/browse/LOG4J2-2819
https://lists.apache.org/thread.html/r0a2699f724156a558afd1abb6c044fb9132caa66dce861b82699722a@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r0df3d7a5acb98c57e64ab9266aa21eeee1d9b399addb96f9cf1cbe05@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2f209d271349bafd91537a558a279c08ebcff8fa3e547357d58833e6@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r393943de452406f0f6f4b3def9f8d3c071f96323c1f6ed1a098f7fe4@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/r4285398e5585a0456d3d9db021a4fce6e6fcf3ec027dfa13a450ec98@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r48bcd06049c1779ef709564544c3d8a32ae6ee5c3b7281a606ac4463@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r48efc7cb5aeb4e1f67aaa06fb4b5479a5635d12f07d0b93fc2d08809@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r7e739f2961753af95e2a3a637828fb88bfca68e5d6b0221d483a9ee5@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8c001b9a95c0bbec06f4457721edd94935a55932e64b82cc5582b846@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r9a79175c393d14d760a0ae3731b4a873230a16ef321aa9ca48a810cd@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd8e87c4d69df335d0ba7d815b63be8bd8a6352f429765c52eb07ddac@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rec34b1cccf907898e7cb36051ffac3ccf1ea89d0b261a2a3b3fb267f@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rf1c2a81a08034c688b8f15cf58a4cfab322d00002ca46d20133bee20@%3Cdev.kafka.apache.org%3E
https://security.netapp.com/advisory/ntap-20200504-0003/
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023
CWE
CWE-295, CWE-297
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"CVSS 3.0": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat Inc., Oracle Corp., Apache Software Foundation, Cisco Systems Inc., \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7 (Red Hat Enterprise Linux), 10.3.6.0.0 (WebLogic Server), 12.1.3.0.0 (WebLogic Server), 11.1.1.7.0 (Enterprise Repository), 12.2.1.3.0 (Fusion Middleware MapViewer), 16.2 (Primavera Unifier), 16.1 (Primavera Unifier), 8.56 (PeopleSoft Enterprise PeopleTools), 8.57 (PeopleSoft Enterprise PeopleTools), 12.2.1.3.0 (WebLogic Server), 16.0 (Oracle Retail Customer Management and Segmentation Foundation), 17.0 (Oracle Retail Customer Management and Segmentation Foundation), 18.0 (Oracle Retail Customer Management and Segmentation Foundation), 15.0 (Oracle Retail Order Broker), 16.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 17.3 (Instantis EnterpriseTrack), 6.2.1 (Agile Engineering Data Management), 8 (Red Hat Enterprise Linux), 12.2.1.3.0 (Oracle Data Integrator), 7 (Jboss Fuse), 4.4.0.0.0 (Utilities Framework), 4.2.0.3.0 (Utilities Framework), 4.2.0.2.0 (Utilities Framework), 13.3.0.1 (Application Testing Suite), 18.8 (Primavera Unifier), 1.0 (OpenShift Application Runtimes), 10.4.6 (Oracle Policy Automation Connector for Siebel), 7 (JBoss Data Grid), 7 (Red Hat Single Sign-On), 7 (Red Hat Process Automation Manager), 12.2.1.4.0 (WebLogic Server), 7.3 (Oracle Communications Unified Inventory Management), 7.4 (Oracle Communications Unified Inventory Management), 7 (Red Hat Descision Manager), 16.0.3 (Oracle Retail Assortment Planning), - (JBoss A-MQ Streaming), 19.12 (Primavera Unifier), \u043e\u0442 17.7 \u0434\u043e 17.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Primavera Unifier), 6.1 (Oracle Communications Interactive Session Recorder), 6.2 (Oracle Communications Interactive Session Recorder), 6.3 (Oracle Communications Interactive Session Recorder), 3.2.0 (Oracle Endeca Information Discovery Studio), 15.0.3 (Oracle Retail Predictive Application Server), 16.0.3 (Oracle Retail Predictive Application Server), 18.0 (Oracle Retail Order Broker), 15.0 (Retail Integration Bus), 16.0 (Retail Integration Bus), 8.58 (PeopleSoft Enterprise PeopleTools), 15.0.3 (Oracle Retail Assortment Planning), \u043e\u0442 16.2.0 \u0434\u043e 16.2.11 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Primavera Gateway), 15.0 (Oracle Retail Financial Integration), 16.0 (Oracle Retail Financial Integration), 8.0.7 (Financial Services Price Creation and Discovery), 14.1.0 (Retail Integration Bus), 14.0.3 (Oracle Retail Predictive Application Server), 14.1.3 (Oracle Retail Predictive Application Server), 15.0 (Oracle Retail Service Backbone), 16.0 (Oracle Retail Service Backbone), 12.1 (Rapid Planning), 12.2 (Rapid Planning), 14.1.1.0.0 (WebLogic Server), 12.4.0.0 (Enterprise Manager Ops Center), 6.3.0 (Communications MetaSolv Solution), 7.3 (Oracle Communications Order and Service Management), 7.4 (Oracle Communications Order and Service Management), \u043e\u0442 8.0.6 \u0434\u043e 8.1.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Financial Services Analytical Applications Infrastructure), 12.1.0 (Oracle FLEXCUBE Investor Servicing), 12.3.0 (Oracle FLEXCUBE Investor Servicing), 12.4.0 (Oracle FLEXCUBE Investor Servicing), 14.0.0 (Oracle FLEXCUBE Investor Servicing), 14.1.0 (Oracle FLEXCUBE Investor Servicing), 12.0.0 (Oracle FLEXCUBE Private Banking), 12.1.0 (Oracle FLEXCUBE Private Banking), \u043e\u0442 2.7.0 \u0434\u043e 2.9.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Banking Enterprise Collections), 15.0.3 (Category Management Planning \u0026 Optimization), 15.0 (Oracle Retail Bulk Data Integration), 16.0 (Oracle Retail Bulk Data Integration), 1.9 (Oracle Retail Data Extractor for Merchandising), 1.10 (Oracle Retail Data Extractor for Merchandising), 15.0.3 (Oracle Retail Item Planning), 15.0.3 (Oracle Retail Macro Space Optimization), 15.0.3 (Oracle Retail Merchandise Financial Planning), 15.0.3 (Oracle Retail Regular Price Optimization), 16.0.3 (Oracle Retail Regular Price Optimization), 15.0.3 (Oracle Retail Replenishment Optimization), 15.0.3 (Oracle Retail Size Profile Optimization), 14.0.4 (Retail Store Inventory Management), 14.1.3 (Retail Store Inventory Management), 15.0.3 (Retail Store Inventory Management), 16.0.3 (Retail Store Inventory Management), 10.0.1.4.0 (Communications Instant Messaging Server), \u043e\u0442 17.12.0 \u0434\u043e 17.12.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Primavera Gateway), \u043e\u0442 18.8.0 \u0434\u043e 18.8.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Primavera Gateway), \u043e\u0442 19.12.0 \u0434\u043e 19.12.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Primavera Gateway), 6.0.1 (Communications Network Charging and Control), \u043e\u0442 12.0.0 \u0434\u043e 12.0.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Communications Network Charging and Control), 7.5.0.23.0 (Communications Billing and Revenue Management), 12.0.0.3.0 (Communications Billing and Revenue Management), \u0434\u043e 2.20.5 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Siebel Engineering - Installer \u0026 Deployment), \u0434\u043e 2.13.2 (Log4j), 6.4 (Oracle Communications Interactive Session Recorder), 2 (A-MQ Clients), \u0434\u043e 9.2.3.3 (JD Edwards EnterpriseOne Tools), \u043e\u0442 7.3.2 \u0434\u043e 7.3.6\u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Communications Network Integrity), 12.5.0 (Oracle Financial Services Lending and Leasing), \u043e\u0442 14.1.0 \u0434\u043e 14.8.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Financial Services Lending and Leasing), 12.2.1.4.0 (Fusion Middleware MapViewer), 2.4.0-2.10.0 (Banking Platform), 1.0 (Oracle Insurance Data Gateway), 18.0 (Oracle Retail Data Extractor for Merchandising), 19.0 (Oracle Retail Extract Transform and Load), 14.1 (Oracle Retail Service Backbone), 8 (Data Grid), 7.0 (Oracle Communications Services Gatekeeper), 2.2.0.0.0 (Utilities Framework), \u043e\u0442 4.3.0.1.0 \u0434\u043e 4.3.0.6.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Utilities Framework), 8.0.6 (Financial Services Price Creation and Discovery), 8.0.6 (Financial Services Retail Customer Analytics), 11.0.2.25 (Insurance Policy Administration J2EE), 11.1.0.15 (Insurance Policy Administration J2EE), \u043e\u0442 5.0.0.0 \u0434\u043e 5.6.0.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Insurance Insbridge Rating and Underwriting), 5.6.1.0 (Insurance Insbridge Rating and Underwriting), 11.1.2.4 (Hyperion Infrastructure Technology), 5.2.0 (FLEXCUBE Core Banking), \u043e\u0442 11.5.0 \u0434\u043e 11.7.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (FLEXCUBE Core Banking), 19.1.0.0.0 (Oracle GoldenGate Application Adapters), 3.9m0p1 (Communications Application Session Controller), 4.4.0.2.0 (Utilities Framework), \u043e\u0442 12.2.0 \u0434\u043e 12.2.20 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Policy Automation), \u043e\u0442 12.2.0 \u0434\u043e 12.2.20 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Policy Automation for Mobile Devices), 19.0 (Oracle Retail Customer Management and Segmentation Foundation), 10.2.0.37 (Insurance Policy Administration J2EE), 10.2.4.12 (Insurance Policy Administration J2EE), 11.2.0.26 (Insurance Policy Administration J2EE), 10.2.0.37 (Oracle Insurance Rules Palette), 10.2.4.12 (Oracle Insurance Rules Palette), 11.0.2.25 (Oracle Insurance Rules Palette), 11.1.0.15 (Oracle Insurance Rules Palette), 11.2.0.26 (Oracle Insurance Rules Palette), 14.1 (Retail Advanced Inventory Planning), 15.0.3.0 (Oracle Retail Bulk Data Integration), 16.0.3.0 (Oracle Retail Bulk Data Integration), \u043e\u0442 19.0 \u0434\u043e 19.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Oracle Retail Order Broker), \u0434\u043e 20.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Siebel UI Framework), 12.2.1.4.0 (Oracle Data Integrator), 3.0.1 (Oracle Health Sciences Information Manager), 2.3.1 (StorageTek Tape Analytics SW Tool), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Log4j:\nhttps://issues.apache.org/jira/browse/LOG4J2-2819\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle Corp.:\nhttps://www.oracle.com/security-alerts/cpujul2020.html\nhttps://www.oracle.com/security-alerts/cpujan2021.html\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2020-9488\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f apache-log4j2 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.12.4-0+deb9u1",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "13.04.2020",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "31.07.2020",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-03624",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-9488",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, WebLogic Server, Enterprise Repository, Fusion Middleware MapViewer, Primavera Unifier, PeopleSoft Enterprise PeopleTools, Oracle Retail Customer Management and Segmentation Foundation, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, Oracle Data Integrator, Jboss Fuse, Utilities Framework, Application Testing Suite, OpenShift Application Runtimes, Oracle Policy Automation Connector for Siebel, JBoss Data Grid, Red Hat Single Sign-On, Red Hat Process Automation Manager, Oracle Communications Unified Inventory Management, Red Hat Descision Manager, Oracle Retail Assortment Planning, JBoss A-MQ Streaming, Oracle Communications Interactive Session Recorder, Oracle Endeca Information Discovery Studio, Oracle Retail Predictive Application Server, Retail Integration Bus, Primavera Gateway, Oracle Retail Financial Integration, Financial Services Price Creation and Discovery, Oracle Retail Service Backbone, Rapid Planning, Enterprise Manager Ops Center, Communications MetaSolv Solution, Oracle Communications Order and Service Management, Financial Services Analytical Applications Infrastructure, Oracle FLEXCUBE Investor Servicing, Oracle FLEXCUBE Private Banking, Oracle Banking Enterprise Collections, Category Management Planning \u0026 Optimization, Oracle Retail Bulk Data Integration, Oracle Retail Data Extractor for Merchandising, Oracle Retail Item Planning, Oracle Retail Macro Space Optimization, Oracle Retail Merchandise Financial Planning, Oracle Retail Regular Price Optimization, Oracle Retail Replenishment Optimization, Oracle Retail Size Profile Optimization, Retail Store Inventory Management, Communications Instant Messaging Server, Communications Network Charging and Control, Communications Billing and Revenue Management, Siebel Engineering - Installer \u0026 Deployment, Log4j, A-MQ Clients, JD Edwards EnterpriseOne Tools, Oracle Communications Network Integrity, Oracle Financial Services Lending and Leasing, Banking Platform, Oracle Insurance Data Gateway, Oracle Retail Extract Transform and Load, Data Grid, Oracle Communications Services Gatekeeper, Financial Services Retail Customer Analytics, Insurance Policy Administration J2EE, Insurance Insbridge Rating and Underwriting, Hyperion Infrastructure Technology, FLEXCUBE Core Banking, Oracle GoldenGate Application Adapters, Communications Application Session Controller, Oracle Policy Automation, Oracle Policy Automation for Mobile Devices, Oracle Insurance Rules Palette, Retail Advanced Inventory Planning, Siebel UI Framework, Oracle Health Sciences Information Manager, StorageTek Tape Analytics SW Tool, \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat Inc. Red Hat Enterprise Linux 7 , Red Hat Inc. Red Hat Enterprise Linux 8 , \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 SmtpAppender \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Java-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Log4j, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-295), \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CWE-297)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 SmtpAppender \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Java-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Log4j \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://issues.apache.org/jira/browse/LOG4J2-2819 \nhttps://lists.apache.org/thread.html/r0a2699f724156a558afd1abb6c044fb9132caa66dce861b82699722a@%3Cjira.kafka.apache.org%3E \nhttps://lists.apache.org/thread.html/r0df3d7a5acb98c57e64ab9266aa21eeee1d9b399addb96f9cf1cbe05@%3Cdev.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r2f209d271349bafd91537a558a279c08ebcff8fa3e547357d58833e6@%3Cdev.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r393943de452406f0f6f4b3def9f8d3c071f96323c1f6ed1a098f7fe4@%3Ctorque-dev.db.apache.org%3E \nhttps://lists.apache.org/thread.html/r4285398e5585a0456d3d9db021a4fce6e6fcf3ec027dfa13a450ec98@%3Cissues.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r48bcd06049c1779ef709564544c3d8a32ae6ee5c3b7281a606ac4463@%3Cjira.kafka.apache.org%3E \nhttps://lists.apache.org/thread.html/r48efc7cb5aeb4e1f67aaa06fb4b5479a5635d12f07d0b93fc2d08809@%3Ccommits.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695@%3Cnotifications.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220@%3Cdev.kafka.apache.org%3E \nhttps://lists.apache.org/thread.html/r7e739f2961753af95e2a3a637828fb88bfca68e5d6b0221d483a9ee5@%3Cnotifications.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r8c001b9a95c0bbec06f4457721edd94935a55932e64b82cc5582b846@%3Cissues.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1@%3Cjira.kafka.apache.org%3E \nhttps://lists.apache.org/thread.html/r9a79175c393d14d760a0ae3731b4a873230a16ef321aa9ca48a810cd@%3Cissues.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc@%3Cissues.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rd8e87c4d69df335d0ba7d815b63be8bd8a6352f429765c52eb07ddac@%3Cissues.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rec34b1cccf907898e7cb36051ffac3ccf1ea89d0b261a2a3b3fb267f@%3Ccommits.zookeeper.apache.org%3E \nhttps://lists.apache.org/thread.html/rf1c2a81a08034c688b8f15cf58a4cfab322d00002ca46d20133bee20@%3Cdev.kafka.apache.org%3E \nhttps://security.netapp.com/advisory/ntap-20200504-0003/ \nhttps://www.oracle.com/security-alerts/cpujul2020.html\nhttps://www.oracle.com/security-alerts/cpujan2021.html\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-295, CWE-297",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)\n\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,7)"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…