VMware揭露自動化處理平臺存在高風險漏洞，攻擊者可對其發動SQL注入攻擊
支付動態 · 2024-07-11
本週VMware發布資安公告，指出旗下的雲端自動化平臺Aria Automation存在高風險漏洞CVE-2024-22280，攻擊者可藉由輸入特定SQL查詢指令觸發，而能在未經授權的情況下對資料庫讀取或是寫入
7月10日VMware修補旗下雲端自動化平臺Aria Automation高風險漏洞CVE-2024-22280，此為SQL注入漏洞，起因是並未套用正確的輸入驗證產生，CVSS風險評分為8.5，影響8.17.0版以下的Aria Automation，以及4.x版、5.x版Cloud Foundation。
攻擊者若要利用這項漏洞，可在通過身分驗證的情況下，輸入偽造的SQL查詢指令，從而進行未經授權的資料庫讀取及寫入作業。
對此，VMware針對8.13.0至8.16.2版發布修補程式，並表示沒有其他替代的緩解措施，呼籲用戶應儘速套用。
Popular articles
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Indiana online casino bill stalls in House committee
Regulation
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
British gambling levy rates confirmed for each vertical
Regulation
HUIDU Invites You to Booth T70 at iGB L!VE 2026 — Let’s Ignite London This July!
HUIDU Focus
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
