운영하시는 시스템에 아래의 국정원 국가사이버안보센터에서 요청한 제품 취약점 보안조치 권고를 전달하여 드립니다.
1) 개 요
• 최근 Github 등에 공개 된 해킹도구를 통해 국내 서버대상 공격이 발생
• 이에, 해당도구를 통한 취약점 공격으로 인해 피해발생이 우려됨에 따라, 취약한 버전의 소프트웨어 및 서버를 최신 버전으로 업데이트 권고
2) 취약점
제품 취약점 영향 버전 CVSS Score
Apache HTTP서버 CVE-2021-41773 Apache HTTP Server 2.4.49 7.5(High)
CVE-2021-42013 Apache HTTP Server 2.4.49, 2.4.50 9.8(Critical)
Apache Struts2 CVE-2021-31805 >= 2.0.0, <= 2.5.29 9.8(Critical)
CVE-2020-17530 < 2.5.26 9.8(Critical)
Apache Tomcat AJP CVE-2020-1938 >= 7.0.0, <= 7.0.99 7.5(High)
>= 8.5.0, <= 8.5.50
>= 9.0.0.M1, <= 9.0.0.30
Apache APISIX CVE-2021-45232 < 2.10.1 9.8(Critical)
Dashboad
Apache Log4j CVE-2021-44228 >= 2.0-beta9, <= 2.15.0 10.0(Critical)
(2.12.2, 2.12.3, 2.3.1 제외)
Apache OFBiz ERP CVE-2021-26295 < 17.12.06 9.8(Critical)
CVE-2020-9496 < 17.12.04 6.1(Medium)
Atlassian CVE-2021-26084 Confluence Server / Data Center 8.6(High)
Confluence < 6.13.23
>= 6.14.0, < 7.4.11
>= 7.5.0, < 7.11.6
>= 7.12.0, < 7.12.5
F5 Big-IP CVE-2022-1388 >=16.1.0, <16.1.2.2 9.8(Critical)
>=15.1.0, <15.1.5.1
>=14.1.0, <14.1.4.6
>=13.1.0, <13.1.5
>=12.1.0, <=12.1.6
>=11.6.0, <=11.6.5
CVE-2021-22986 >= 16.0.0, < 16.0.1.1
>=15.1.0, < 15.1.2.1
>= 14.1.0, < 14.1.4
>= 13.1.0, < 13.1.3.6
>= 12.1.0, < 12.1.5.3
>=7.1.0.0, < 7.1.0.3
>= 7.0.0.0, < 7.0.0.2
Grafana Labs CVE-2021-43798 8.0.0-beta1 ~ 8.3.0 7.5(High)
Grafana
Inspur CVE-2020-21224 Inspur Cluster Engine V4.0 5.5(Medium)
Cluster Engine
VMware CVE-2022-22965 >=5.3.0, < 5.3.18 5.3(Medium)
Spring Framework >=5.2.0, < 5.2.20
<= 5.1
Microsoft SMBv3 CVE-2020-0796 Windows10 v1903 10.0(Critical)
Windows10 v1909
WindowsServer 2016 v1903
WindowsServer 2016 v1909
Oracle Weblogic CVE-2021-2109 10.3.6.0.0, 12.1.3.0.0, 7.2(High)
Server 12.2.1.3.0, 12.2.1.4.0,
14.1.1.0.0
VMware CVE-2022-22954 ONE Access <= 21.08.0.1; <= 20.10.0.1 9.8(Critical)
Workspace One Access Identity Manager >= 3.3.3, <= 3.3.6
VMware CVE-2022-22963 < 3.1.6, 3.2.2 9.8(Critical)
Spring Cloud Function
VMware vCenter CVE-2021-22005 VMWare Cloud Foundation 3.x 8.1(High)
CVE-2021-21972 VMWare Cloud Foundation 4.x 9.8(Critical)
VMWare vCenter Server 7.0
VMWare vCenter Server 6.7
VMWare vCenter Server 6.5
VMware CVE-2022-22947 VMware 10.0(Critical)
Spring Cloud Tanzu Spring Cloud Gateway < 3.0.7
Gateway VMware
Tanzu Spring Cloud Gateway < 3.1.11
WSO2 CVE-2022-29464 WSO2 API Manager 2.2.0 - 4.0.0 9.8(Critical)
WSO2 Identity Server 5.2.0 - 5.11.0
WSO2 Identity Server Analytics 5.4.0,
5.4.1, 5.5.0, 5.6.0
WSO2 Identity Server as Key Manager
5.3.0 - 5.10.0
WSO2 Enterprise Integrator 6.2.0 - 6.6.0
WSO2 Open Banking AM 1.4.0 - 2.0.0
WSO2 Open Banking KM 1.4.0 - 2.0.0
TamronOS IPTV CVE-2019-12725 Zeroshell 3.9.3 이전 5.5(Medium)
3) 해결 방안
취약점 참고 사이트
CVE-2021-41773 https://httpd.apache.org/security/vulnerabilities_24.html
CVE-2021-42013 https://httpd.apache.org/security/vulnerabilities_24.html
CVE-2021-31805 https://cwiki.apache.org/confluence/display/WW/S2-061
CVE-2020-17530 https://cwiki.apache.org/confluence/display/WW/S2-061
CVE-2020-1938 https://cwiki.apache.org/confluence/display/WW/S2-061
CVE-2021-45232 https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5
CVE-2021-44228 https://logging.apache.org/log4j/2.x/security.html
CVE-2021-26295 https://seclists.org/oss-sec/2021/q1/255
CVE-2020-9496 https://issues.apache.org/jira/browse/OFBIZ-11716
CVE-2021-26084 https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html
CVE-2022-1388 https://support.f5.com/csp/article/K23605346
CVE-2021-22986 https://support.f5.com/csp/article/K03009991
CVE-2021-43798 https://boho.or.kr/data/secNoticeView.do?bulletin_writing_sequence=36386&queryString=cGFnZT0zMiZzb3J0X2NvZGU9JnNvcnRfY29kZV9uYW1lPSZzZWFyY2hfc29ydD10aXRsZV9uYW1lJnNlYXJjaF93b3JkPQ==
CVE-2020-21224 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21224
CVE-2022-22965 https://spring.io/blog/2022/03/31/spring-boot-2-6-6-available-now
CVE-2020-0796 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796
CVE-2021-2109 https://www.oracle.com/security-alerts/cpujan2021.html
CVE-2022-22954 https://www.vmware.com/security/advisories/VMSA-2022-0011.html
CVE-2022-22963 https://tanzu.vmware.com/security/cve-2022-22963
CVE-2021-22005 https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE-2021-21972 https://www.vmware.com/security/advisories/VMSA-2021-0002.html
CVE-2022-22947 https://tanzu.vmware.com/security/cve-2022-22947
CVE-2022-29464 https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738
CVE-2019-12725 https://www.zeroshell.org/new-release-and-critical-vulnerability
o 관련 문의 : 과기정통부 사이버안전센터 061-338-4952