yun2025 发表于 3 小时前

腾讯旗下搜狗问问今日正式停运 账号将自动注销

腾讯旗下搜狗问问今日正式停运 账号将自动注销

IBM API Connect:门户数据的租户隔离可能被绕过

11月7日公开的漏洞记录CVE-2026-17410涉及IBM API Connect。IBM的接口管理平台处理参数分隔符时存在缺口。已经通过身份验证的远程用户,在特定条件下可能读到其他租户的门户数据,也可能更改数据。问题跨越的是不同租户之间的权限边界,公告分别列出10系列与12系列中受到影响的发行分支。版本清单标出的受影响范围包括12.1.0.0至12.1.1.2(含)、10.0.8.0至10.0.8.12(含)。

这条记录给出的CVSS 3.1基础评分为9.9分,分级为严重。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。

https://lightroom.adobe.com/shares/ad58ce5a5ff69444886dd9601dc50db1
https://lightroom.adobe.com/shares/5396503fe0a3134dbd2468cb7638cceb
https://lightroom.adobe.com/shares/b8a47e3a3caabd4a981cf313c4927df4
https://lightroom.adobe.com/shares/a14b17190ce2774b99cf4d5cede120a7
https://lightroom.adobe.com/shares/10419237af3edc42a12d5a2488d40225
https://lightroom.adobe.com/shares/ce2ef2f15196704688cd0d31334b38fc
https://lightroom.adobe.com/shares/859b5311f924c844b1f85b817a719a82
https://lightroom.adobe.com/shares/b2ef6ddf4d256e4a880ed00c9cf7e74b
https://lightroom.adobe.com/shares/73e9fd624eec1b4da8a341e8ee5fb2e6
https://lightroom.adobe.com/shares/5261d3f8ff9d044ba8cbc6a2b462a4b8
https://lightroom.adobe.com/shares/a98642a6ad3bea4a9dd6edcce2a53326
https://lightroom.adobe.com/shares/66313c9230df5f4799ffbc23862f3dec
https://lightroom.adobe.com/shares/a2571383091e8b4d8b2999c35b7e046a
https://lightroom.adobe.com/shares/c6e8d5eb43468246b849bc75584ab1e1
https://lightroom.adobe.com/shares/a28f3c540426394faac3eaa9b896145c
https://lightroom.adobe.com/shares/115a9b8b5d3eec498b14ac55db5b75de
https://lightroom.adobe.com/shares/b3ac3ab907847745aa45abb934f95ccf
https://lightroom.adobe.com/shares/79d5e65b7822814fa6a8ef3116260d28
https://lightroom.adobe.com/shares/56358d7f59a9c44b8bc7636baf81a5f6
https://lightroom.adobe.com/shares/d2f152615e36634488a076f7344dc2d5
https://lightroom.adobe.com/shares/95b051de7f24e44bae966c80238e5240
https://lightroom.adobe.com/shares/22b10d09f922e947a60f74e7fe142f63
https://lightroom.adobe.com/shares/8af353ea645cfc4bb897431f0c4d2cef
https://lightroom.adobe.com/shares/460b5d4079d2fa42b6b7a3257db2b41c
https://lightroom.adobe.com/shares/b0bf02be6880184b9713db7b95b7fce3
https://lightroom.adobe.com/shares/2ae7a14d52cc3743924e844e69ee6092
https://lightroom.adobe.com/shares/780a2e9417b37841a2d592f8fc8037d6
https://lightroom.adobe.com/shares/3e7114a7e2a7a14b9ac908ddfda3c813
https://lightroom.adobe.com/shares/221b2233fd4a654eb2d868b18648e846
https://lightroom.adobe.com/shares/cd6dabda51bd824aae32db16c4d2c903
https://lightroom.adobe.com/shares/24a178f75b190840bb496a01b6db1225
https://lightroom.adobe.com/shares/3bc2cd2a085aa549a2273b2517893e7b
https://lightroom.adobe.com/shares/5cac646bfa13cf47a5b2ef083410fd49
https://lightroom.adobe.com/shares/d8722ebcb7729d4da47b74fd6884a432
https://lightroom.adobe.com/shares/160f69287584b745946d69c33015f7d2
https://lightroom.adobe.com/shares/93bd0b6c493ac44a98b1c686ba3c2213
https://lightroom.adobe.com/shares/263584d5cea56b458dd59c7888d70619
https://lightroom.adobe.com/shares/7b2e6e4c29d89e4aa0aa6e3119420e3d
https://lightroom.adobe.com/shares/95fa2949d797f84a88b7c75a1400493f
https://lightroom.adobe.com/shares/c8e6b50a66f7ee4fbc174e787154a201
https://lightroom.adobe.com/shares/d1c530d2d690c545aef667670c4bbc89
https://lightroom.adobe.com/shares/68df86206db61a479bcea589c78c4122
https://lightroom.adobe.com/shares/373e4566c814b84c91cd899bbaaa5a24
https://lightroom.adobe.com/shares/cf6f52010623aa448d2e9794e6c3c1f1
https://lightroom.adobe.com/shares/afdbf19f3593744eadba8d0ff285e286
https://lightroom.adobe.com/shares/45034397faaf534eb37b7b9fe7753237
https://lightroom.adobe.com/shares/ad3c3b1ed6316344bc432cec63333620
https://lightroom.adobe.com/shares/d95153374aef5649b47a8d4224aa9a04
https://lightroom.adobe.com/shares/c4dcf05facfb554b89f5bb1a4788b4d7
https://lightroom.adobe.com/shares/e7e3508a1c30644bbb443dcd9d45037e

曾迦 发表于 3 小时前

沙发!沙发!
页: [1]
查看完整版本: 腾讯旗下搜狗问问今日正式停运 账号将自动注销