資安事件

微軟 SharePoint 漏洞遭大規模攻擊

發佈於 I.X





根據美國電信業者 AT&T 的資安研究室指出，有大規模的網路攻擊事件，利用微軟 SharePoint 的漏洞 CVE-2019-0604 進行攻擊。在微軟關於本漏洞的資安報告中指出，駭客可利用這個漏洞執行任意程式碼並上傳、下載檔案。

受影響的版本

  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft SharePoint Foundation 2013 SP1
  • Microsoft SharePoint Server 2010 SP2
  • Microsoft SharePoint Server 2019

微軟已於 2019 年三月提供相關漏洞修補，但許多用戶系統仍未升級。

建議

  • 所有微軟 SharePoint 伺服器應儘速升級到 2019年 3月 12日的最新漏洞修補。
  • 針對 on-premises 解決方案的用戶，請確保伺服器不直接對外暴露於 Internet。

總結

在佈建企業內部的網路服務時，若因應員工需求，必須開放允許透過 Internet 存取時，最好搭配能過濾非法流量的資安產品。I.X 針對身份認證與存取企業網路應用服務，提供完整的解決方案，能針對應用及存取權限，即時過濾非法存取，同時可避免非法流量直接透過程式碼的漏洞，入侵內部重要系統。有助於您保護公司重要的數位資產。

想瞭解最適合貴公司的資安解決方案？我們提供免費諮詢服務！

在〈微軟 SharePoint 漏洞遭大規模攻擊〉中有 222 則留言

  5. 自動引用通知: vagragenericaar.org
  7. 自動引用通知: generic albuterol inhaler for sale

  8. After looking at a handful of the articles on your web site, I truly appreciate your technique of writing a blog. I added it to my bookmark website list and will be checking back in the near future. Take a look at my website as well and let me know what you think.|

    回覆
  9. 自動引用通知: doctor7online.com
  10. 自動引用通知: cipro cost
  12. 自動引用通知: generic viagra available
  13. 自動引用通知: buy naltrexone

  14. I like the valuable info you provide in your articles.
    I will bookmark your blog and check again here regularly.
    I’m quite sure I’ll learn many new stuff right here! Good luck for the next!

    回覆
  16. 自動引用通知: tylenol online sales
  19. 自動引用通知: chloroquine prescription

  142. Great post. I was checking continuously this blog and I’m inspired!
    Very helpful info particularly the last phase 🙂 I care for such information much.
    I used to be seeking this certain information for a long time.
    Thank you and best of luck.

    回覆

  145. Good site! I truly love how it is simple on my eyes and the data are well written. I’m wondering
    how I could be notified whenever a new post has been made.
    I have subscribed to your RSS which must do the trick!
    Have a great day!

    回覆

  197. This is very attention-grabbing, You’re a very skilled blogger.
    I’ve joined your rss feed and look ahead to in the hunt for more of your great post.
    Additionally, I have shared your website in my social networks!

    Also visit my web blog … cpc certification (pastebin.com)

    回覆

  206. Nice post. I used to be checking continuously this blog and I’m inspired!
    Extremely useful info specifically the final section 🙂
    I deal with such info much. I was seeking this particular info for a long time.
    Thanks and best of luck.

    My page: cpc exam (enetget.com)

    回覆

  217. Nice post. I learn something new and challenging
    on blogs I stumbleupon everyday. It will always be helpful to read through content from other writers and practice something from other web sites.

    回覆

  219. I think what you posted was very reasonable. However, what about this?
    what if you typed a catchier title? I am not saying your information is not solid.,
    however what if you added something to maybe get folk’s attention? I mean 微軟 SharePoint 漏洞遭大規模攻擊 |
    I·X Trio is a little vanilla. You could look at Yahoo’s home page
    and watch how they create post headlines to get viewers interested.
    You might add a video or a related pic or two to get readers interested about
    what you’ve got to say. In my opinion, it might
    make your posts a little bit more interesting.

    回覆

  220. Right here is the right web site for anyone who wants to understand this
    topic. You realize a whole lot its almost hard to
    argue with you (not that I actually will need to…HaHa).

    You certainly put a fresh spin on a topic which has been written about for a long
    time. Wonderful stuff, just excellent!

    回覆

發佈回覆給「Gregoryexere」的留言 取消回覆

發佈留言必須填寫的電子郵件地址不會公開。 必填欄位標示為 *

這個網站採用 Akismet 服務減少垃圾留言。進一步瞭解 Akismet 如何處理網站訪客的留言資料。