yun2025 发表于 昨天 10:25

也门胡塞武装称袭击沙特石油设施及其支持的军事目标

也门胡塞武装称袭击沙特石油设施及其支持的军事目标

trusted-remote-execution:示例部署脚本可能绕过远程执行策略

11月7日公开的漏洞记录CVE-2026-122193涉及trusted-remote-execution。问题涉及用于配置云端受管实例的示例脚本。具备相应文档调用权限的已登录用户,可能在实例上以最高权限执行原本受到策略约束的命令。公告特别区分了有调用权限的用户与普通外部访客,并把由示例创建的管理文档列为检查对象。

这条记录给出的CVSS 3.1基础评分为9.9分,分级为严重。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制,衡量这条记录所描述情形下的技术严重性。

https://lightroom.adobe.com/shares/17610680adee414c855384a9d6b7488c
https://lightroom.adobe.com/shares/b0353391dec3294c92a30ae50a891cde
https://lightroom.adobe.com/shares/d640065a314f5f4e8e31524209260288
https://lightroom.adobe.com/shares/ca09deb3e143824c85e6008eb917452f
https://lightroom.adobe.com/shares/24cc0a1f704b1d4a907d73eb9418297a
https://lightroom.adobe.com/shares/95f869fdf5399c419ab1490ba236903d
https://lightroom.adobe.com/shares/7046ea65860a0146ab0da6e3a4afa5d6
https://lightroom.adobe.com/shares/d7ff9c418b603841b8d919752378a23f
https://lightroom.adobe.com/shares/c110095db3c68a4789b1936a0fed6ea3
https://lightroom.adobe.com/shares/20bae77af202484ba4cbe34391430e16
https://lightroom.adobe.com/shares/8a19927f23cde649b21e268e3d424066
https://lightroom.adobe.com/shares/d9dd4e055f26e44cac7102d5bb068340
https://lightroom.adobe.com/shares/bff189e16bc83f4bab1e008d7b40e376
https://lightroom.adobe.com/shares/b5c21f949e13ee4ba43fba79cabf38bb
https://lightroom.adobe.com/shares/3392eb41bd552c4488ef9ba8b2aae9e7
https://lightroom.adobe.com/shares/5cfd2f1d63910642a47038dabaa50f42
https://lightroom.adobe.com/shares/c4214dfd79295b48b8e8e22fb4636334
https://lightroom.adobe.com/shares/4bf8849888891e49b21fff44a9502511
https://lightroom.adobe.com/shares/a1ba9bb6d760eb4d899372cd3607d9f8
https://lightroom.adobe.com/shares/b92e6ad63a002e46a1c1ce5f645b13ae
https://lightroom.adobe.com/shares/4cd7bc12b1728040a423000d7eba9e25
https://lightroom.adobe.com/shares/35033111f266f644879f0f910ba8b12a
https://lightroom.adobe.com/shares/878dda03089e0f4a95ea365a8b8b68bf
https://lightroom.adobe.com/shares/730dea778af8204ca05e183a1f677c6c
https://lightroom.adobe.com/shares/a0e78df30d708049879b1b82af3983ff
https://lightroom.adobe.com/shares/90333a4333af154aa6aafcd88fffb8ba
https://lightroom.adobe.com/shares/8a6b606796be84478302190ea3e96a0b
https://lightroom.adobe.com/shares/bd25e7f94bfbcc49b82911816bf16d5b
https://lightroom.adobe.com/shares/009110fdec3f2f45890f7865e30614ae
https://lightroom.adobe.com/shares/81352c5ecb6e164996bab29fde0b7435
https://lightroom.adobe.com/shares/ef5379215afaea43a18458f5120addff
https://lightroom.adobe.com/shares/f0e666179d480543a6c2ba6e0ffe33c8
https://lightroom.adobe.com/shares/32fc44df5edac949a836511900f21286
https://lightroom.adobe.com/shares/19c239757382314c90c03e46f628e6fe
https://lightroom.adobe.com/shares/0cddf475a77b3e4db43a76d6e8bebb75
https://lightroom.adobe.com/shares/07764bbc6661704082ab3015e47dcf2e
https://lightroom.adobe.com/shares/9d4be214b214fa47ac47abd4f92a490c
https://lightroom.adobe.com/shares/53b84341e1a29441a6503371c1de2b8e
https://lightroom.adobe.com/shares/5123ce2ffe70194b97c9db8011121a0d
https://lightroom.adobe.com/shares/a24af9e6586c934fa29d872f43f748ad
https://lightroom.adobe.com/shares/9ada9d3ec1ee524990fe4b717bbb1dba
https://lightroom.adobe.com/shares/7104a8fdafcbe849b926febb118e43e5
https://lightroom.adobe.com/shares/67ac3d334468fc4695483ba56e3a79fb
https://lightroom.adobe.com/shares/3a35ab57656dec429e5640eec359c45a
https://lightroom.adobe.com/shares/2ab260f6689ed145aa7e97b09a4ff41a
https://lightroom.adobe.com/shares/8bca38973eb4494eaaf355e9dbd3993f
https://lightroom.adobe.com/shares/570016cb9dc2a14d9aff512c56e14c45
https://lightroom.adobe.com/shares/c0fda79d51bd8942a22e4a7a41108f6a
https://lightroom.adobe.com/shares/9ae0fd2510d0c74ea722a0a099549747
https://lightroom.adobe.com/shares/a20af46a115ace47b81570d75c585755

剑鱼 发表于 昨天 10:31

我抢、我抢、我抢沙发~
页: [1]
查看完整版本: 也门胡塞武装称袭击沙特石油设施及其支持的军事目标