{"id":698530,"date":"2023-04-22T09:02:40","date_gmt":"2023-04-22T11:02:40","guid":{"rendered":"https:\/\/teknomers.com\/fr\/cisa-ajoute-3-failles-activement-exploitees-au-catalogue-kev-y-compris-le-bogue-papercut-critique\/"},"modified":"2023-04-22T09:02:43","modified_gmt":"2023-04-22T11:02:43","slug":"cisa-ajoute-3-failles-activement-exploitees-au-catalogue-kev-y-compris-le-bogue-papercut-critique","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/cisa-ajoute-3-failles-activement-exploitees-au-catalogue-kev-y-compris-le-bogue-papercut-critique\/","title":{"rendered":"CISA ajoute 3 failles activement exploit\u00e9es au catalogue KEV, y compris le bogue PaperCut critique"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">22 avril 2023<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Gestion des correctifs \/ Vuln\u00e9rabilit\u00e9<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><\/div>\n<p>L&#8217;agence am\u00e9ricaine de cybers\u00e9curit\u00e9 et de s\u00e9curit\u00e9 des infrastructures (CISA) a ajout\u00e9 vendredi trois failles de s\u00e9curit\u00e9 \u00e0 ses vuln\u00e9rabilit\u00e9s exploit\u00e9es connues (<a rel=\"nofollow noopener\" href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\">KEV<\/a>), sur la base de preuves d&#8217;exploitation active.<\/p>\n<p>Le <a rel=\"nofollow noopener\" href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2023\/04\/21\/cisa-adds-three-known-exploited-vulnerabilities-catalog\" target=\"_blank\">trois vuln\u00e9rabilit\u00e9s<\/a> sont les suivants &#8211;<\/p>\n<ul>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-28432\" target=\"_blank\"><strong>CVE-2023-28432<\/strong><\/a>  (Score CVSS &#8211; 7,5) &#8211; Vuln\u00e9rabilit\u00e9 de divulgation d&#8217;informations MinIO <\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27350\" target=\"_blank\"><strong>CVE-2023-27350<\/strong><\/a>  (Score CVSS &#8211; 9,8) &#8211; Vuln\u00e9rabilit\u00e9 de contr\u00f4le d&#8217;acc\u00e8s incorrect PaperCut MF\/NG<\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-2136\" target=\"_blank\"><strong>CVE-2023-2136<\/strong><\/a>  (Score CVSS &#8211; TBD) &#8211; Vuln\u00e9rabilit\u00e9 de d\u00e9bordement d&#8217;entiers dans Google Chrome Skia<\/li>\n<\/ul>\n<p>&#8220;Dans un d\u00e9ploiement en cluster, MinIO renvoie toutes les variables d&#8217;environnement, y compris MINIO_SECRET_KEY et MINIO_ROOT_PASSWORD, ce qui entra\u00eene la divulgation d&#8217;informations&#8221;, expliquent les responsables de MinIO. <a rel=\"nofollow noopener\" href=\"https:\/\/github.com\/minio\/minio\/security\/advisories\/GHSA-6xvq-wj2x-3h3q\" target=\"_blank\">a dit<\/a> dans un avis publi\u00e9 le 21 mars 2023.<\/p>\n<p>Les donn\u00e9es recueillies par GreyNoise montrent que jusqu&#8217;\u00e0 <a rel=\"nofollow noopener\" href=\"https:\/\/viz.greynoise.io\/query\/?gnql=tags%3A%22Minio%20Information%20Disclosure%20Attempt%22\" target=\"_blank\">18 adresses IP malveillantes uniques<\/a> des \u00c9tats-Unis, des Pays-Bas, de la France, du Japon et de la Finlande ont <a rel=\"nofollow noopener\" href=\"https:\/\/viz.greynoise.io\/tag\/minio-information-disclosure-attempt?days=30\" target=\"_blank\">tent\u00e9 d&#8217;exploiter<\/a> la faille au cours des 30 derniers jours.<\/p>\n<p>La soci\u00e9t\u00e9 de renseignements sur les menaces, dans un <a rel=\"nofollow noopener\" href=\"https:\/\/www.greynoise.io\/blog\/openai-minio-and-why-you-should-always-use-docker-cli-scan-to-keep-your-supply-chain-clean\" target=\"_blank\">alerte<\/a> publi\u00e9 \u00e0 la fin du mois dernier, a \u00e9galement not\u00e9 comment un <a rel=\"nofollow noopener\" href=\"https:\/\/github.com\/openai\/chatgpt-retrieval-plugin\/blob\/32bf09d16c4341571b530dd319d6678cb00f2d44\/examples\/docker\/milvus\/self-hosted\/docker-compose.yml#L18\" target=\"_blank\">impl\u00e9mentation de r\u00e9f\u00e9rence<\/a> fourni par OpenAI aux d\u00e9veloppeurs pour int\u00e9grer leurs plugins \u00e0 ChatGPT s&#8217;appuyait sur une ancienne version de MinIO vuln\u00e9rable \u00e0 CVE-2023-28432.<\/p>\n<p>&#8220;Bien que la nouvelle fonctionnalit\u00e9 publi\u00e9e par OpenAI soit un outil pr\u00e9cieux pour les d\u00e9veloppeurs qui souhaitent acc\u00e9der aux donn\u00e9es en direct de divers fournisseurs dans leur int\u00e9gration ChatGPT, la s\u00e9curit\u00e9 doit rester un principe de conception de base&#8221;, a d\u00e9clar\u00e9 GreyNoise.<\/p>\n<p>Un bogue critique d&#8217;ex\u00e9cution de code \u00e0 distance affectant le logiciel de gestion d&#8217;impression PaperCut qui permet aux attaquants distants de contourner l&#8217;authentification et d&#8217;ex\u00e9cuter du code arbitraire a \u00e9galement \u00e9t\u00e9 ajout\u00e9 au catalogue KEV.<\/p>\n<p>La vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e par le fournisseur le 8 mars 2023, avec la sortie des versions 20.1.7, 21.2.11 et 22.0.9 de PaperCut MF et PaperCut NG.  Initiative Zero Day, qui <a rel=\"nofollow noopener\" href=\"https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-23-233\/\" target=\"_blank\">signal\u00e9<\/a> le num\u00e9ro du 10 janvier 2023 devrait publier des d\u00e9tails techniques suppl\u00e9mentaires le 10 mai 2023.<\/p>\n<div class=\"ad_two clear\" style=\"margin: 20px 10px 30px 0;background: rgb(249 251 255);color: rgb(22, 7, 85);padding: 0px 5%;border: 2px solid rgb(217 222 255);border-radius: 10px;text-align: left;box-shadow: 10px 10px 0 #e2ebff;border-top-left-radius: 50px;border-bottom-right-radius: 50px;\"> <span style=\"font-size:14px;margin:25px 0 0 0;font-weight:900;background: #dbdefc;display:inline-block;padding: 3px 20px;border-radius: 100px;letter-spacing: 0.5px;color: #596cec;\">WEBINAIRE \u00c0 VENIR<\/span><\/p>\n<p>Zero Trust + Deception\u00a0: apprenez \u00e0 d\u00e9jouer les attaquants\u00a0!<\/p>\n<p style=\"text-align:left;font-size:17px;line-height:30px;margin: 10px 0;color: #4e6a8d;\">D\u00e9couvrez comment Deception peut d\u00e9tecter les menaces avanc\u00e9es, arr\u00eater les mouvements lat\u00e9raux et am\u00e9liorer votre strat\u00e9gie Zero Trust.  Rejoignez notre webinaire perspicace !<\/p>\n<p><a rel=\"nofollow noopener\" href=\"https:\/\/thn.news\/z-inside-2\" target=\"_blank\" style=\"padding: 10px 20px;border-radius: 8px;background-color: #4469f5;font-size:16px;display:inline-block;color:#fff;border:0;line-height:inherit;text-decoration:none;cursor:pointer;MARGIN: 10px 0 25px 0;float:left;font-weight:500;letter-spacing: 0.2px;\">Sauvez ma place\u00a0!<\/a><\/div>\n<p>Selon un <a rel=\"nofollow noopener\" href=\"https:\/\/www.papercut.com\/kb\/Main\/PO-1216-and-PO-1219\" target=\"_blank\">mise \u00e0 jour<\/a> partag\u00e9e par la soci\u00e9t\u00e9 bas\u00e9e \u00e0 Melbourne plus t\u00f4t cette semaine, des preuves d&#8217;exploitation active de serveurs non corrig\u00e9s sont apparues dans la nature vers le 18 avril 2023.<\/p>\n<p>Soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 Arctic Wolf <a rel=\"nofollow noopener\" href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-27350\/\" target=\"_blank\">a dit<\/a> il &#8220;a observ\u00e9 une activit\u00e9 d&#8217;intrusion associ\u00e9e \u00e0 un serveur PaperCut vuln\u00e9rable o\u00f9 l&#8217;outil RMM Synchro MSP a \u00e9t\u00e9 charg\u00e9 sur un syst\u00e8me victime&#8221;.<\/p>\n<p>Enfin, ajout\u00e9e \u00e0 la liste des failles activement exploit\u00e9es, une vuln\u00e9rabilit\u00e9 de Google Chrome affectant la biblioth\u00e8que graphique Skia 2D pourrait permettre \u00e0 un acteur malveillant d&#8217;effectuer une \u00e9vasion du bac \u00e0 sable via une page HTML sp\u00e9cialement con\u00e7ue.<\/p>\n<p>Il est recommand\u00e9 aux agences du Federal Civilian Executive Branch (FCEB) aux \u00c9tats-Unis de corriger les vuln\u00e9rabilit\u00e9s identifi\u00e9es d&#8217;ici le 12 mai 2023, afin de s\u00e9curiser leurs r\u00e9seaux contre les menaces actives.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2023\/04\/cisa-adds-3-actively-exploited-flaws-to.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80222 avril 2023\ue804Ravie LakshmananGestion des correctifs \/ Vuln\u00e9rabilit\u00e9 L&#8217;agence am\u00e9ricaine de cybers\u00e9curit\u00e9 et de s\u00e9curit\u00e9 des infrastructures (CISA) a ajout\u00e9 vendredi trois failles de s\u00e9curit\u00e9 \u00e0 ses vuln\u00e9rabilit\u00e9s exploit\u00e9es connues (KEV), sur la base de preuves d&#8217;exploitation active. Le trois vuln\u00e9rabilit\u00e9s sont les suivants &#8211; CVE-2023-28432 (Score CVSS &#8211; 7,5) &#8211; Vuln\u00e9rabilit\u00e9 de divulgation d&#8217;informations [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":698531,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[4807,12361,6813,12364,4805,4168,1672,22,4158,4165,4161,4808,4806,67979,4157,4159,4171,4170,4167,4160,4163,4162,157853,4172,4169,4166,4164],"class_list":["post-698530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-activement","tag-ajoute","tag-bogue","tag-catalogue","tag-cisa","tag-comment-pirater","tag-compris","tag-critique","tag-cyber-actualites","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-exploitees","tag-failles","tag-kev","tag-lactualite-de-la-cybersecurite","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-la-securite-des-informations","tag-logiciel-malveillant-de-ransomware","tag-mises-a-jour-de-la-cybersecurite","tag-nouvelles-de-piratage","tag-nouvelles-de-pirates","tag-papercut","tag-securite-informatique","tag-securite-internet","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/698530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=698530"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/698530\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/698531"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=698530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=698530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=698530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}