{"id":5451,"date":"2024-03-06T22:02:59","date_gmt":"2024-03-06T14:02:59","guid":{"rendered":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=5451"},"modified":"2024-03-07T22:47:57","modified_gmt":"2024-03-07T14:47:57","slug":"jetbrains%e7%b7%8a%e6%80%a5%e4%bf%ae%e8%a3%9cteamcity%e6%bc%8f%e6%b4%9e%ef%bc%8c%e4%bd%86%e6%83%b9%e6%af%9b%e9%80%9a%e5%a0%b1%e7%9a%84%e8%b3%87%e5%ae%89%e5%bb%a0%e5%95%86","status":"publish","type":"post","link":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=5451","title":{"rendered":"JetBrains\u7dca\u6025\u4fee\u88dcTeamCity\u6f0f\u6d1e\uff0c\u4f46\u60f9\u6bdb\u901a\u5831\u7684\u8cc7\u5b89\u5ee0\u5546"},"content":{"rendered":"\n

2024-03-06 | \u6797\u598d\u6eb1<\/p>\n\n\n\n

\u6377\u514b\u958b\u767c\u5de5\u5177\u4f9b\u61c9\u5546JetBrains\u5468\u4e8c\u7dca\u6025\u4fee\u88dc\u65d7\u4e0bTeamCity\u5e73\u81fa\u8edf\u9ad4\u4e8c\u500b\u91cd\u5927\uff0c\u4e14\u5df2\u6709\u6feb\u7528\u884c\u70ba\u7684\u6f0f\u6d1e\uff0c\u4f46\u662f\u906d\u5230\u901a\u5831\u8cc7\u5b89\u5ee0\u5546\u6279\u8a55\uff0c\u8edf\u9ad4\u696d\u8005\u55ae\u65b9\u5411\u4fee\u88dc\u6f0f\u6d1e\u672a\u544a\u77e5\uff0c\u5df2\u9055\u53cd\u5176\u5b89\u5168\u653f\u7b56\uff0c\u63da\u8a00\u516c\u5e03\u6f0f\u6d1e\u7d30\u7bc0\u3002<\/p>\n\n\n\n

JetBrains\u672c\u5468\u4e00\u4fee\u88dc\u5176CI\/CD\u5de5\u5177TeamCity\u7684CVE-2024-27198\u53caCVE-2024-27199\u6f0f\u6d1e\u3002\u5169\u6f0f\u6d1e\u662f\u57282\u6708\u4e2d\u7531Rapid7\u901a\u5831<\/a>\u3002\u5176\u4e2dCVE-2024-27198\u662fTeamCity Web\u5143\u4ef6\u7684\u9a57\u8b49\u7e5e\u904e\u6f0f\u6d1e\uff0c\u6e90\u65bcTeamCity\u7684Web\u5143\u4ef6\u4e2d\u7684\u66ff\u4ee3\u8def\u5f91\uff0c\u5176CVSS\u98a8\u96aa\u503c\u70ba9.8\u3002CVE-2024-27199\u4e5f\u662f\u8eab\u4efd\u9a57\u8b49\u7e5e\u904e\u6f0f\u6d1e\uff0c\u6e90\u81ea\u65bcTeamCity\u7684Web\u5143\u4ef6\u4e2d\u7684\u8def\u5f91\u904d\u6b77\u554f\u984c\uff08path traversal\uff09\uff0cCVSS\u98a8\u96aa\u503c\u70ba7.3\u3002\u672c\u6b21\u6f0f\u6d1e\u5f71\u97ffTeamCity 2023.11.4\u4ee5\u524d\u7684\u7248\u672c\uff0cJetBrains\u767c\u5e03\u4e86\u8edf\u9ad4\u66f4\u65b0\u7248\u672c\uff08TeamCity 2023.11.4\uff09\u53ca\u4fee\u88dc\u7a0b\u5f0f\u5916\u639b\uff0c\u4e5f\u547c\u7c72\u7528\u6236\u66f4\u65b0\u8edf\u9ad4\u7248\u672c\u3002<\/p>\n\n\n\n

\u901a\u5e38\u8cc7\u5b89\u696d\u8005\u53ca\u8edf\u9ad4\u516c\u53f8\u91dd\u5c0d\u5b89\u5168\u6f0f\u6d1e\u7684\u65b0\u805e\u5728\u6b64\u544a\u4e00\u6bb5\u843d\uff0c\u4f46Rapid7\u537b\u5c0dJetBrains\u6f0f\u6d1e\u4fee\u88dc\u672a\u544a\u77e5\u611f\u5230\u4e0d\u6eff\u3002\u96d9\u65b9\u57282\u6708\u4e2d\u9996\u6b21\u53d6\u5f97\u806f\u7e6b\uff0c2\u670820\u65e5Rapid7\u63d0\u4f9b\u4e8c\u9805\u6f0f\u6d1e\u7684\u6280\u8853\u7d30\u7bc0\uff0c\u4e5f\u63d0\u53ca\u300c\u5354\u540c\u63ed\u9732\u300d\uff08coordinated disclosure\uff09\u7684\u91cd\u8981\u6027\uff0c\u8981\u6c42JetBrains\u63d0\u4f9b\u4fee\u88dc\u6642\u7a0b\u3001\u7de9\u89e3\u65b9\u6cd5\u53ca\u5f71\u97ff\u7684\u8edf\u9ad4\u7248\u672c\u7b49\u8cc7\u8a0a\u3002\u4f46JetBrains\u53cd\u5012\u5efa\u8b70\u5148\u6697\u4e2d\u4fee\u88dc\u518d\u516c\u958b\u6f0f\u6d1e\u8cc7\u8a0a\uff0c\u9019\u6642Rapid7\u8b66\u544a\u672a\u544a\u77e5\u4fee\u88dc\u662f\u6240\u8b02\u300c\u975c\u9ed8\u4fee\u88dc\u300d\uff08silent patching\uff09\u884c\u70ba\uff0c\u9055\u53cd\u5176\u653f\u7b56\u3002<\/p>\n\n\n\n

Rapid7\u7684\u975c\u9ed8\u4fee\u88dc\u662f\u6307\uff0c\u8edf\u9ad4\u696d\u8005\u5c0d\u8cc7\u5b89\u5ee0\u5546\u901a\u5831\u7684\u6f0f\u6d1e\uff0c\u5728\u795e\u4e0d\u77e5\u9b3c\u4e0d\u89ba\u60c5\u6cc1\u4e0b\u4fee\u88dc\u8d77\u4f86\u3002\u4e0d\u516c\u958b\u6b78\u529f\u65bc\u8cc7\u5b89\u7814\u7a76\u4eba\u54e1\uff0c\u96b1\u85cf\u6f0f\u6d1e\u6280\u8853\u7d30\u7bc0\u3001\u653b\u64ca\u624b\u6cd5\u3001\u4e5f\u4e0d\u767c\u5e03\u6f0f\u6d1e\u7de8\u865f\uff0c\u8a8d\u70ba\u6108\u5c11\u4eba\u77e5\u9053\u5c0d\u7528\u6236\u6108\u5b89\u5168\u3002\u4f46Rapid7\u6307\u51fa\uff0c\u9019\u7a2e\u4f5c\u6cd5\u53ea\u6703\u8b93\u5c11\u90e8\u4efd\u653b\u64ca\u8005\u548c\u60e1\u610f\u4eba\u58eb\u7368\u64c1\u653b\u64ca\u624b\u6cd5\u53ca\u9632\u885b\u77e5\u8b58\uff0c\u53cd\u800c\u9677\u5927\u773e\u65bc\u96aa\u5883\u3002<\/p>\n\n\n\n

\u5728\u96d9\u65b9\u6e9d\u901a\u672a\u679c\u5f8c\uff0c3\u67084\u65e5Rapid7\u767c\u73feJetBrains\u5df2\u767c\u51fa\u5b89\u5168\u516c\u544a\u767c\u5e03\u8edf\u9ad4\u66f4\u65b0\u7248\u672c\uff0c\u5373\u5df2\u5728\u672a\u544a\u77e5\u60c5\u6cc1\u4e0b\u4fee\u88dc\u4e86\u6f0f\u6d1e\u3002Rapid7\u6307\u63a7JetBrains\u7684\u975c\u9ed8\u4fee\u88dc\u884c\u70ba\uff0c\u63da\u8a00\u5c07\u572824\u5c0f\u6642\u5167\u516c\u5e03\u6f0f\u6d1e\u7d30\u7bc0\u3002\u7576\u5929Rapid7\u65bc\u662f\u516c\u5e03\u4e86\u6f0f\u6d1e\u6280\u8853\u7d30\u7bc0\u3002\u540c\u4e00\u5929JetBrains\u6b63\u5f0f\u767c\u5e03\u65b0\u7684\u5b89\u5168\u516c\u544a\uff0c\u5305\u62ec\u6f0f\u6d1e\u7de8\u865f\u53ca\u767c\u5e03\u8aaa\u660e\u3002<\/p>\n\n\n

\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n

\u53e6\u4e00\u5bb6\u8cc7\u5b89\u696d\u8005Shadowserver\u5075\u6e2c\u5230\uff0c\u5df2\u7d93\u6709\u91dd\u5c0dTeamCity CVE-2024-27198\u6f0f\u6d1e\u7684\u6feb\u7528\u7a0b\u5f0f\uff0c\u76ee\u524d\u5df2\u6383\u7784\u523016\u500b\u4f86\u6e90IP\u4f4d\u5740\u3002<\/p>\n\n\n\n

JetBrains\u8868\u793a\uff0c\u516c\u53f8\u653f\u7b56\u4e00\u822c\u4fdd\u7559\u4e0d\u516c\u958b\u6280\u8853\u7d30\u7bc0\uff0c\u8b93\u5ba2\u6236\u6709\u6642\u9593\u90e8\u7f72\u9632\u8b77\u3002\u8a72\u516c\u53f8\u63d0\u4f9b2\u9805\u65b9\u6848\uff0c\u4e00\u662f\u5347\u7d1aTeamCity\u4f3a\u670d\u5668\u52302023.11.4\u7248\u672c\uff0c\u4e8c\u662f\u4fee\u88dc\u7a0b\u5f0f\u5916\u639b\uff0c\u4f9b\u4f86\u4e0d\u53ca\u5b89\u88dd\u4fee\u88dc\u7a0b\u5f0f\u7684\u7528\u6236\u5b89\u88dd\u3002<\/p>\n\n\n

\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n

\u8cc7\u6599\u4f86\u6e90:https:\/\/www.ithome.com.tw\/news\/161631<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

2024-03-06 | \u6797\u598d\u6eb1 \u6377\u514b\u958b\u767c\u5de5\u5177\u4f9b\u61c9\u5546JetBrains\u5468\u4e8c\u7dca\u6025\u4fee\u88dc\u65d7\u4e0bTeamCity\u5e73\u81fa\u8edf\u9ad4\u4e8c\u500b\u91cd\u5927\uff0c\u4e14\u5df2\u6709\u6feb\u7528\u884c\u70ba\u7684\u6f0f\u6d1e\uff0c\u4f46\u662f\u906d\u5230\u901a\u5831\u8cc7\u5b89\u5ee0\u5546\u6279\u8a55\uff0c\u8edf\u9ad4\u696d\u8005\u55ae\u65b9…<\/p>\n","protected":false},"author":9,"featured_media":5452,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[352],"tags":[204],"class_list":["post-5451","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","tag-204"],"gutentor_comment":0,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/aict.nkust.edu.tw\/digitrans\/wp-content\/uploads\/2024\/03\/0306-teamcity-cve-960.jpg?fit=960%2C420&ssl=1","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/5451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5451"}],"version-history":[{"count":1,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/5451\/revisions"}],"predecessor-version":[{"id":5453,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/5451\/revisions\/5453"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/media\/5452"}],"wp:attachment":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}