{"id":20430,"date":"2024-09-20T16:46:51","date_gmt":"2024-09-20T09:46:51","guid":{"rendered":"https:\/\/thegioifirewall.com\/?p=20421"},"modified":"2025-03-24T07:27:22","modified_gmt":"2025-03-24T07:27:22","slug":"tin-tac-tan-dung-mat-khau-mac-dinh-trong-phan-mem-foundation-de-xam-nhap-cac-cong-ty-xay-dung","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/tin-tac-tan-dung-mat-khau-mac-dinh-trong-phan-mem-foundation-de-xam-nhap-cac-cong-ty-xay-dung\/","title":{"rendered":"Tin t\u1eb7c t\u1eadn d\u1ee5ng m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh trong ph\u1ea7n m\u1ec1m Foundation \u0111\u1ec3 x\u00e2m nh\u1eadp c\u00e1c c\u00f4ng ty x\u00e2y d\u1ef1ng"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"http:\/\/aws.vacif.com\/wp-content\/uploads\/sites\/3\/2024\/09\/tin-tac-tan-dung-mat-khau-mac-dinh-trong-phan-mem-foundation.png\" alt=\"\" class=\"wp-image-20423\"\/><\/figure>\n\n\n\n<p>Theo ph\u00e1t hi\u1ec7n m\u1edbi t\u1eeb c\u00f4ng ty an ninh m\u1ea1ng Huntress, c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 nh\u1eafm v\u00e0o ng\u00e0nh x\u00e2y d\u1ef1ng b\u1eb1ng c\u00e1ch x\u00e2m nh\u1eadp v\u00e0o ph\u1ea7n m\u1ec1m k\u1ebf to\u00e1n FOUNDATION.<\/p>\n\n\n\n<p>Huntress cho bi\u1ebft, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 th\u1ef1c hi\u1ec7n t\u1ea5n c\u00f4ng brute-force quy m\u00f4 l\u1edbn v\u00e0o ph\u1ea7n m\u1ec1m v\u00e0 d\u1ec5 d\u00e0ng truy c\u1eadp b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp m\u1eb7c \u0111\u1ecbnh c\u1ee7a s\u1ea3n ph\u1ea9m. C\u00e1c m\u1ee5c ti\u00eau c\u1ee7a m\u1ed1i \u0111e d\u1ecda n\u00e0y bao g\u1ed3m c\u00e1c l\u0129nh v\u1ef1c ph\u1ee5 nh\u01b0 h\u1ec7 th\u1ed1ng \u1ed1ng n\u01b0\u1edbc, HVAC (h\u1ec7 th\u1ed1ng s\u01b0\u1edfi, th\u00f4ng gi\u00f3 v\u00e0 \u0111i\u1ec1u h\u00f2a kh\u00f4ng kh\u00ed), b\u00ea t\u00f4ng v\u00e0 c\u00e1c ng\u00e0nh li\u00ean quan kh\u00e1c.<\/p>\n\n\n\n<p>Ph\u1ea7n m\u1ec1m FOUNDATION s\u1eed d\u1ee5ng Microsoft SQL (MS SQL) Server \u0111\u1ec3 qu\u1ea3n l\u00fd c\u01a1 s\u1edf d\u1eef li\u1ec7u v\u00e0 trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p, c\u1ed5ng TCP 4243 \u0111\u01b0\u1ee3c m\u1edf \u0111\u1ec3 truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o c\u01a1 s\u1edf d\u1eef li\u1ec7u qua \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng. Theo Huntress, m\u00e1y ch\u1ee7 n\u00e0y bao g\u1ed3m hai t\u00e0i kho\u1ea3n c\u00f3 quy\u1ec1n cao, bao g\u1ed3m t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng m\u1eb7c \u0111\u1ecbnh &#8220;sa&#8221; v\u00e0 t\u00e0i kho\u1ea3n &#8220;dba&#8221; do FOUNDATION t\u1ea1o ra, th\u01b0\u1eddng \u0111\u01b0\u1ee3c \u0111\u1ec3 l\u1ea1i v\u1edbi m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh kh\u00f4ng \u0111\u1ed5i.<\/p>\n\n\n\n<p>K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng c\u00e1ch brute-force \u0111\u1ec3 x\u00e2m nh\u1eadp m\u00e1y ch\u1ee7 v\u00e0 khai th\u00e1c t\u00f9y ch\u1ecdn c\u1ea5u h\u00ecnh xp_cmdshell nh\u1eb1m th\u1ef1c thi c\u00e1c l\u1ec7nh h\u1ec7 \u0111i\u1ec1u h\u00e0nh t\u00f9y \u00fd.<\/p>\n\n\n\n<p>D\u1ea5u hi\u1ec7u \u0111\u1ea7u ti\u00ean c\u1ee7a ho\u1ea1t \u0111\u1ed9ng n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0o ng\u00e0y 14 th\u00e1ng 9 n\u0103m 2024, khi kho\u1ea3ng 35.000 l\u1ea7n th\u1eed \u0111\u0103ng nh\u1eadp brute-force v\u00e0o m\u1ed9t m\u00e1y ch\u1ee7 MS SQL \u0111\u00e3 \u0111\u01b0\u1ee3c ghi nh\u1eadn tr\u01b0\u1edbc khi k\u1ebb t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng truy c\u1eadp.<\/p>\n\n\n\n<p>Trong s\u1ed1 500 m\u00e1y ch\u1ee7 ch\u1ea1y ph\u1ea7n m\u1ec1m FOUNDATION \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 b\u1edfi Huntress, c\u00f3 33 m\u00e1y ch\u1ee7 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n l\u00e0 c\u00f4ng khai truy c\u1eadp v\u1edbi th\u00f4ng tin \u0111\u0103ng nh\u1eadp m\u1eb7c \u0111\u1ecbnh. \u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro, Huntress khuy\u1ebfn ngh\u1ecb n\u00ean xoay v\u00f2ng m\u1eadt kh\u1ea9u c\u1ee7a c\u00e1c t\u00e0i kho\u1ea3n m\u1eb7c \u0111\u1ecbnh, ng\u1eebng c\u00f4ng khai \u1ee9ng d\u1ee5ng tr\u00ean internet n\u1ebfu c\u00f3 th\u1ec3 v\u00e0 v\u00f4 hi\u1ec7u h\u00f3a t\u00f9y ch\u1ecdn xp_cmdshell khi c\u1ea7n thi\u1ebft.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Theo ph\u00e1t hi\u1ec7n m\u1edbi t\u1eeb c\u00f4ng ty an ninh m\u1ea1ng Huntress, c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 nh\u1eafm v\u00e0o ng\u00e0nh x\u00e2y d\u1ef1ng b\u1eb1ng c\u00e1ch x\u00e2m nh\u1eadp v\u00e0o ph\u1ea7n m\u1ec1m k\u1ebf to\u00e1n FOUNDATION. Huntress cho bi\u1ebft, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 th\u1ef1c hi\u1ec7n t\u1ea5n c\u00f4ng brute-force quy m\u00f4 l\u1edbn v\u00e0o ph\u1ea7n m\u1ec1m v\u00e0 d\u1ec5 d\u00e0ng truy c\u1eadp [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":20562,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80,10],"tags":[150,498,499],"class_list":["post-20430","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","category-tin-tuc","tag-an-ninh-mang","tag-foundation","tag-microsoft-sql","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=20430"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20430\/revisions"}],"predecessor-version":[{"id":20577,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/20430\/revisions\/20577"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/20562"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=20430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=20430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=20430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}