漏洞補(bǔ)丁 憑證繞過 VPN

近日，研究者在派拓網(wǎng)絡(luò)、Fortinet與Pulse Secure的VPN解決方案中發(fā)現(xiàn)漏洞，該漏洞能夠被攻擊者利用，不需要用戶名和密碼的驗(yàn)證即可進(jìn)入網(wǎng)絡(luò)。Fortinet在申明發(fā)布后更新了自己的固件以修復(fù)該漏洞，而Pulse Secure表示自己在四月份的更新中就修復(fù)了此漏洞。對(duì)于派拓網(wǎng)絡(luò)而言，這個(gè)漏洞只存在于較老版本當(dāng)中，但是該版本的服務(wù)卻依然被Uber廣泛使用。申明發(fā)布后，Uber對(duì)自己的軟件進(jìn)行了更新；而派拓網(wǎng)絡(luò)則督促自己的客戶盡快進(jìn)行補(bǔ)丁修復(fù)次漏洞。

Warning over VPNs from Palo Alto Networks, Fortinet and Pulse Secure after researchers uncover new security flaw

Researchers at Devcore claim to have discovered security flaws in three popular corporate VPNs that could enable attackers to steal confidential information from a company's network. The security flaws...