{"id":12651,"date":"2020-11-03T11:36:53","date_gmt":"2020-11-03T04:36:53","guid":{"rendered":"http:\/\/antoanthongtinhaiphong.gov.vn\/?p=12651"},"modified":"2020-11-05T17:03:07","modified_gmt":"2020-11-05T10:03:07","slug":"canh-bao-nguy-co-tan-cong-vao-cac-co-quan-to-chuc-qua-lo-hong-trong-oracle-weblogic","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/canh-bao-nguy-co-tan-cong-vao-cac-co-quan-to-chuc-qua-lo-hong-trong-oracle-weblogic\/","title":{"rendered":"C\u1ea3nh b\u00e1o nguy c\u01a1 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c c\u01a1 quan t\u1ed5 ch\u1ee9c qua l\u1ed7 h\u1ed5ng trong Oracle Weblogic"},"content":{"rendered":"

Ng\u00e0y 29\/10\/2020, C\u1ee5c An to\u00e0n th\u00f4ng tin, B\u1ed9 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng c\u00f3 v\u0103n b\u1ea3n s\u1ed1 974\/CATTT-NCSC g\u1eedi H\u1ec7 th\u1ed1ng c\u00e1c \u0111\u01a1n v\u1ecb chuy\u00ean tr\u00e1ch v\u1ec1 an to\u00e0n th\u00f4ng tin v\u1ec1 vi\u1ec7c nguy c\u01a1 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c c\u01a1 quan t\u1ed5 ch\u1ee9c qua l\u1ed7 h\u1ed5ng trong Oracle Weblogic.<\/h3>\n

\"\"<\/p>\n

Ng\u00e0y 29\/10\/2020, C\u1ee5c An to\u00e0n th\u00f4ng tin, B\u1ed9 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng c\u00f3 v\u0103n b\u1ea3n s\u1ed1 974\/CATTT-NCSC g\u1eedi H\u1ec7 th\u1ed1ng c\u00e1c \u0111\u01a1n v\u1ecb chuy\u00ean tr\u00e1ch v\u1ec1 an to\u00e0n th\u00f4ng tin v\u1ec1 vi\u1ec7c nguy c\u01a1 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c c\u01a1 quan t\u1ed5 ch\u1ee9c qua l\u1ed7 h\u1ed5ng trong Oracle Weblogic.<\/p>\n

Theo C\u1ee5c An to\u00e0n th\u00f4ng tin, qua c\u00f4ng t\u00e1c gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia (NCSC) ph\u00e1t hi\u1ec7n xu h\u01b0\u1edbng khai th\u00e1c l\u1ed7 h\u1ed5ng trong Oracle Weblogic, C\u1ee5 th\u1ec3 l\u00e0 l\u1ed7 h\u1ed5ng CVE-2020-14882 (nghi\u00eam tr\u1ecdng) cho ph\u00e9p \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng \u0111\u1ecdc t\u1ec7p t\u00f9y \u00fd.<\/p>\n

Theo \u0111\u00e1nh gi\u00e1 s\u01a1 b\u1ed9 Vmware vCenter l\u00e0 \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng t\u1ea1i r\u1ea5t nhi\u1ec1u c\u01a1 quan t\u1ed5 ch\u1ee9c trong vi\u1ec7c qu\u1ea3n l\u00fd t\u1eadp trung c\u00e1c m\u00e1y \u1ea3o v\u00e0 m\u00e1y ch\u1ee7 ESX\/ESXi (c\u00f3 \u00edt nh\u1ea5t h\u01a1n 20 h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7 \u0111ang ho\u1ea1t \u0111\u1ed9ng c\u00f4ng khai tr\u00ean Internet, ch\u01b0a k\u1ec3 nhi\u1ec1u h\u1ec7 th\u1ed1ng kh\u00f4ng c\u00f4ng khai). Ng\u00e0y 28\/10\/2020, qua c\u00f4ng t\u00e1c theo d\u00f5i, gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia, C\u1ee5c An to\u00e0n th\u00f4ng tin ph\u00e1t hi\u1ec7n c\u00f3 m\u1ed9t s\u1ed1 m\u00e3 khai th\u00e1c \u0111\u00e3 c\u00f4ng khai tr\u00ean Internet. Nh\u1eefng m\u00e3 khai th\u00e1c n\u00e0y c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ec3 t\u1ea5n c\u00f4ng v\u00e0o m\u00e1y ch\u1ee7 web b\u1ecb \u1ea3nh h\u01b0\u1edfng, qua \u0111\u00f3 ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng th\u00f4ng tin c\u1ee7a c\u00e1c c\u01a1 quan t\u1ed5 ch\u1ee9c.<\/p>\n

Nh\u1eb1m \u0111\u1ea3m b\u1ea3o an to\u00e0n th\u00f4ng tin cho h\u1ec7 th\u1ed1ng th\u00f4ng tin, g\u00f3p ph\u1ea7n b\u1ea3o \u0111\u1ea3m an to\u00e0n cho kh\u00f4ng gian m\u1ea1ng Vi\u1ec7t Nam, C\u1ee5c An to\u00e0n th\u00f4ng tin y\u00eau c\u1ea7u c\u01a1 quan, \u0111\u01a1n v\u1ecb tri\u1ec3n khai quy\u1ebft li\u1ec7t m\u1ed9t s\u1ed1 khuy\u1ebfn ngh\u1ecb sau:<\/p>\n

    \n
  1. Ki\u1ec3m tra, r\u00e0 so\u00e1t c\u00e1c m\u00e1y ch\u1ee7 web c\u00f3 s\u1eed d\u1ee5ng Oracle Weblogic \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 x\u1eed l\u00fd k\u1ecbp th\u1eddi nguy c\u01a1 t\u1ea5n c\u00f4ng th\u00f4ng qua l\u1ed7 h\u1ed5ng n\u00e0y. Trong tr\u01b0\u1eddng h\u1ee3p \u0111\u00e3 c\u00f3 d\u1ea5u hi\u1ec7u t\u1ea5n c\u00f4ng c\u1ea7n th\u1ef1c hi\u1ec7n r\u00e0 so\u00e1t to\u00e0n b\u1ed9 m\u00e1y ch\u1ee7 v\u00e0 h\u1ec7 th\u1ed1ng li\u00ean quan \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 lo\u1ea1i b\u1ecf c\u00e1c t\u1eadp tin \u0111\u1ed9c h\u1ea1i, m\u00e3 \u0111\u1ed9c m\u00e0 \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng \u0111\u1ec3 l\u1ea1i tr\u00ean h\u1ec7 th\u1ed1ng.<\/li>\n
  2. C\u1eadp nh\u1eadt b\u1ea3n v\u00e1 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt cho \u1ee9ng d\u1ee5ng. Trong tr\u01b0\u1eddng h\u1ee3p ch\u01b0a th\u1ec3 c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 c\u1ea7n tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p \u0111\u1ec3 h\u1ea1n ch\u1ebf, ng\u0103n ch\u1eb7n vi\u1ec7c khai th\u00e1c l\u1ed7 h\u1ed5ng.<\/li>\n
  3. Trong tr\u01b0\u1eddng h\u1ee3p c\u1ea7n thi\u1ebft c\u00f3 th\u1ec3 li\u00ean h\u1ec7 \u0111\u1ea7u m\u1ed1i h\u1ed7 tr\u1ee3 c\u1ee7a C\u1ee5c An to\u00e0n th\u00f4ng tin: Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia (NCSC), \u0111i\u1ec7n tho\u1ea1i: 02432091616, th\u01b0 \u0111i\u1ec7n t\u1eed: ais@mic.gov.vn. S\u1edf Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng c\u1eed \u00f4ng Nguy\u1ec5n \u0110\u00f4ng Huy (Tr\u01b0\u1edfng Ph\u00f2ng H\u1ea1 t\u1ea7ng k\u1ef9 thu\u1eadt v\u00e0 An to\u00e0n th\u00f4ng tin – Trung t\u00e2m Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng, s\u1ed1 \u0111i\u1ec7n tho\u1ea1i 098.4462472) l\u00e0 \u0111\u1ea7u m\u1ed1i ph\u1ed1i h\u1ee3p, trao \u0111\u1ed5i th\u00f4ng tin.<\/li>\n<\/ol>\n

    T\u1ea3i c\u00f4ng v\u0103n \u0111\u00ednh k\u00e8m t\u1ea1i \u0111\u00e2y: 2232-STTTT-CNTT.signed<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Ng\u00e0y 29\/10\/2020, C\u1ee5c An to\u00e0n th\u00f4ng tin, B\u1ed9 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng c\u00f3 v\u0103n b\u1ea3n s\u1ed1 974\/CATTT-NCSC g\u1eedi H\u1ec7 th\u1ed1ng c\u00e1c \u0111\u01a1n v\u1ecb chuy\u00ean tr\u00e1ch v\u1ec1 an to\u00e0n th\u00f4ng tin v\u1ec1 vi\u1ec7c nguy c\u01a1 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c c\u01a1 quan t\u1ed5 ch\u1ee9c qua l\u1ed7 h\u1ed5ng trong Oracle Weblogic. Ng\u00e0y 29\/10\/2020, C\u1ee5c An to\u00e0n th\u00f4ng […]<\/p>\n","protected":false},"author":5,"featured_media":12652,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24],"tags":[],"class_list":["post-12651","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tin-noi-bat"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/12651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=12651"}],"version-history":[{"count":0,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/12651\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/12652"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=12651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=12651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=12651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}