VMware揭露自動化處理平臺存在高風險漏洞，攻擊者可對其發動SQL注入攻擊
支付動態 · 2024-07-11
本週VMware發布資安公告，指出旗下的雲端自動化平臺Aria Automation存在高風險漏洞CVE-2024-22280，攻擊者可藉由輸入特定SQL查詢指令觸發，而能在未經授權的情況下對資料庫讀取或是寫入
7月10日VMware修補旗下雲端自動化平臺Aria Automation高風險漏洞CVE-2024-22280，此為SQL注入漏洞，起因是並未套用正確的輸入驗證產生，CVSS風險評分為8.5，影響8.17.0版以下的Aria Automation，以及4.x版、5.x版Cloud Foundation。
攻擊者若要利用這項漏洞，可在通過身分驗證的情況下，輸入偽造的SQL查詢指令，從而進行未經授權的資料庫讀取及寫入作業。
對此，VMware針對8.13.0至8.16.2版發布修補程式，並表示沒有其他替代的緩解措施，呼籲用戶應儘速套用。
热门文章
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Kazakhstan plans to penalise online casino promotions
Regulation
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
