浜戝畨鍏ㄦ棩鎶�210726锛欼BM浼佷笟鏂囦欢浜や粯瑙ｅ喅鏂规�鍙戠幇鎵ц�浠绘剰浠ｇ爜婕忔礊,闇€瑕佸敖蹇�崌绾�

IBM Sterling Connect鏄疘BM鍏�徃鐨勪竴濂楀熀浜庣偣鍒扮偣鏂囦欢浼犺緭杞�欢銆傝浜戝�杞�欢鐢ㄤ簬瀹炵幇浼佷笟鍐呭拰浼佷笟闂寸殑澶у�閲忋€佸畨鍏ㄥ彲闈犵殑鏂囦欢浜や粯銆�7鏈�23鏃�,I畨鍏BM鍙戝竷浜嗗畨鍏ㄦ洿鏂�,淇��浜咺BM Sterling Connect鏂囦欢浜や粯瑙ｅ喅鏂规�涓�彂ㄦ棩鐜扮殑鎵ц�浠绘剰浠ｇ爜婕忔礊銆備互涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇︽儏

鏉ユ簮: https://w鎶�ww.ibm.com/support/pages/node/6474955

CVE-2020-192153 CVSS璇勫垎锛�8.8 涓ラ噸绋嬪害:閲嶈�

Apache Commons 閰嶇疆鍙�兘鍏佽�杩滅07▼鏀诲嚮鑰呭湪绯荤粺涓婃墽琛屼换鎰忎唬鐮侊紝杩欐槸鐢遍粯璁ゆ儏鍐典笅鍏佽�绫伙紙鍖呮嫭鐗规畩璇�彞锛夊疄渚26嬪寲鏃跺嚭鐜扮殑闂��寮曡捣鐨勩€傞€氳繃璇存湇鍙楀�鑰呭姞杞界壒鍒剁殑 YAML 鏂囦欢锛屾敾鍑昏€锛欼呭彲浠ュ埄鐢ㄦ�婕忔礊鍦ㄧ郴缁熶笂鎵ц�浠绘剰浠ｇ爜銆�

鍙楀奖鍝嶇殑浜у搧鍜岀増鏈�

涓婅堪婕忔礊BM褰卞搷Sterling Connect Direct File Agent 1.4.0.0 - 1.4.0.2_iFix浼佷007.

瑙ｅ喅鏂规�

IBM 宸插彂甯冨畨鍏ㄦ洿鏂�,Sterling Connect Direct File Age笟鏂nt 1.4鐗堟湰搴旂敤1.4.0.2_iFix008鎴栨洿楂樼増鏈�ˉ涓佸嵆鍙�慨澶嶃€�

瀵逛簬涓嶅彈鏀�囦欢寔鐨勭増鏈�紝IBM 寤鸿�鍗囩骇鍒颁骇鍝佺殑鍥哄畾銆佸彈鏀�寔鐗堟湰銆�

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗囩浜や骇璇疯�闂�畼缃戯細

https://www.ibm.com/blogs/psirt/