yun2026 发表于 4 天前

2026 CCF中国软件大会天津开幕 聚焦“软件筑基智能新时代”

2026 CCF中国软件大会天津开幕 聚焦“软件筑基智能新时代”

SecureDrop:关闭提醒时可能将多余密钥文件复制至部署端

11月7日公开的漏洞记录CVE-2026-71863涉及SecureDrop。SecureDrop用于新闻机构与匿名消息提供者之间的文件往来。安装流程在记者提醒被关闭时,会留下空的提醒密钥文件名,随后复制步骤可能把配置目录中的多份文件一并带走。正常应逐项指定的凭据文件,因此可能跨越部署环节原有的隔离边界。版本清单标出的受影响范围包括不低于2.13.0且低于2.16.1。

这条记录给出的CVSS 3.1基础评分为2.6分,分级为低危。按照评分列出的条件,利用者可通过网络接触相关功能,需要具备较高的既有权限,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、无、无。评分把利用复杂度列为较高,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/ccbfdaf923c0bd47830df13e46fd45c7
https://lightroom.adobe.com/shares/b91e642cf9c2e04086585281c2c68bae
https://lightroom.adobe.com/shares/a00c1a22468dae4283dfb61457f311f2
https://lightroom.adobe.com/shares/0a9599cb1b040f48b66c639c5cb12b3a
https://lightroom.adobe.com/shares/ffc1cc6858ad4946a135db39bc9c2331
https://lightroom.adobe.com/shares/963eae9c7af6164b8b0b1673b7de849e
https://lightroom.adobe.com/shares/34ab401c159fb8439f14d57998c84844
https://lightroom.adobe.com/shares/9e49d1baae797d42a462c71f68fa1c94
https://lightroom.adobe.com/shares/8fd26fcd9a526d44a57b882ad0bc90a4
https://lightroom.adobe.com/shares/9cfd199ea3ec474798817f3f8a5d79b2
https://lightroom.adobe.com/shares/ec29f38c8cf03946a63b729068361aab
https://lightroom.adobe.com/shares/0df4c8e42296dc43b360d73674402ed0
https://lightroom.adobe.com/shares/7b3fb365e0e44d4d9c75dd579529456e
https://lightroom.adobe.com/shares/60f078ce67e59246b7893279b2fc96d0
https://lightroom.adobe.com/shares/e1d0b8399f91e9488f133604c8db86fb
https://lightroom.adobe.com/shares/f52cb33f6f88db4288155832de72fe8b
https://lightroom.adobe.com/shares/484484f584a5d84281de876319021365
https://lightroom.adobe.com/shares/d92d967f586fa241aa48529e5f7894f4
https://lightroom.adobe.com/shares/73f5c5af12224b4d8df88c141261d893
https://lightroom.adobe.com/shares/6eed55e863f6384193880cb61d1ca4b5
https://lightroom.adobe.com/shares/c330c3c7678d8545b57ddca4a6c4e119
https://lightroom.adobe.com/shares/63cee8ac28068847883e0d834c9eea4c
https://lightroom.adobe.com/shares/64edac6b86c66442ac9ba0dd62de7588
https://lightroom.adobe.com/shares/913aabd39933754ba2d0a7a9614e8978
https://lightroom.adobe.com/shares/e2ea50878a9ac84c9820d3daf35af76f
https://lightroom.adobe.com/shares/8b9bef7dc79a074ebe23da8112ab9194
https://lightroom.adobe.com/shares/3380989dfa6500468ebd92e7b34ae15b
https://lightroom.adobe.com/shares/a1319596128f7949890719b0915d240e
https://lightroom.adobe.com/shares/5135c693b0154644abb493a417989131
https://lightroom.adobe.com/shares/b46649dc7333e441888fb046ccde40a3
https://lightroom.adobe.com/shares/6f3f1a9ab8deb04c81caf0b97c2ca5ab
https://lightroom.adobe.com/shares/a97ad50f7f85e24a82c91724c84e0be5
https://lightroom.adobe.com/shares/f3700d1a21ac034391469bd6cfa059ef
https://lightroom.adobe.com/shares/117c514a24c1c54eb88fbf99dfb823f3
https://lightroom.adobe.com/shares/bc3573a61373804ba214ebdfadebe868
https://lightroom.adobe.com/shares/b3ba924fb0e37a40920ff1e3c31a001c
https://lightroom.adobe.com/shares/2263155d4dfc47468125df57917929ec
https://lightroom.adobe.com/shares/82b1b76c7335f54a955eb9b65c068e96
https://lightroom.adobe.com/shares/f7d54dca869d1c4bb14db6c69304f413
https://lightroom.adobe.com/shares/9247e28acceed645bd6d8bc04ea8c71b
https://lightroom.adobe.com/shares/32fb84b214620041b43f8063bd15a691
https://lightroom.adobe.com/shares/0fa37f9d5ba1974aaab7e1de8680a12b
https://lightroom.adobe.com/shares/c6bd5f305be16b41a063d83edd337dfd
https://lightroom.adobe.com/shares/21dcfe1f16f4dc409c73587533823476
https://lightroom.adobe.com/shares/6727d4136b90314ebbd350b8f15a865b
https://lightroom.adobe.com/shares/159efca5e5970c46b78408c0b72941e3
https://lightroom.adobe.com/shares/7bd7f323e4aed344a99d76b9ca5d06b8
https://lightroom.adobe.com/shares/4be68e98e558b3439ce937907b4d7e09
https://lightroom.adobe.com/shares/b92ca300ac2c6647b8d6e2376b0819dc
https://lightroom.adobe.com/shares/8c7d4d6203209944bd0357bd59221b60
页: [1]
查看完整版本: 2026 CCF中国软件大会天津开幕 聚焦“软件筑基智能新时代”