¡¡ÊÆ¥µ¥¤¥Ð¡¼¥»¥¥å¥ê¥Æ¥£´ë¶È¤ÎFortinet¤Ï10·î23Æü¡Ê¸½ÃÏ»þ´Ö¡Ë¡¢Æ±¼Ò¤Î¡ÖFortiManager¡×¤Ë¸ºß¤¹¤ë½ÅÂç¤ÊÀȼåÀ¡ÖCVE-2024-47575¡×¤Ë¤Ä¤¤¤Æ¸øɽ¤·¤¿¡£¤³¤ÎÀȼåÀ¤Ï¡¢°°Õ¤Î¤¢¤ë¹¶·â¼Ô¤¬Ç§¾Ú¤Ê¤·¤ËFortiManager¤Ë¥¢¥¯¥»¥¹¤·¡¢Ç¤°Õ¤Î¥³¡¼¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤ò²Äǽ¤Ë¤¹¤ë¤â¤Î¤Ç¡¢´û¤Ë°ÍѤµ¤ì¤¿·ÁÀפ¬¸«¤Ä¤«¤Ã¤Æ¤¤¤ë¡£
¡¡ÊÆBleepingComputer¤Ë¤è¤ë¤È¡¢Fortinet¤Ï¸ÜµÒ¤ËÂФ·¤Æ¤Ï13Æü¤«¤é¤³¤ÎÀȼåÀ¤Ë¤Ä¤¤¤ÆÄÌÃΤ·¤Æ¤¤¤¿¤È¤¤¤¦¡£ÄÌÃΤˤϡ¢¥»¥¥å¥ê¥Æ¥£¥¢¥Ã¥×¥Ç¡¼¥È¤¬¥ê¥ê¡¼¥¹¤µ¤ì¤ë¤Þ¤Ç¤Î´Ö¡¢ÀȼåÀ¤ò·Ú¸º¤¹¤ë¤¿¤á¤Î¼ê½ç¤¬µ¤µ¤ì¤Æ¤¤¤¿¤¬¡¢°ìÉô¤Î¸ÜµÒ¤ÏÄÌÃΤ¬Á÷¿®¤µ¤ì¤ë¿ô½µ´ÖÁ°¤Ë¹¶·â¤ò¼õ¤±¤¿¤ÈReddit¤ËÅê¹Æ¤·¤Æ¤¤¤¿¡Ê¸½ºß¤Ïºï½ü¤µ¤ì¤Æ¤¤¤ë¡Ë¡£
¡¡CVE-2024-47575¤Ï¡¢FortiManager¤Îfgfmd¥Ç¡¼¥â¥ó¤Ë¤ª¤±¤ëǧ¾Ú¤Î·ç´Ù¤òÆͤ¤¤¿¤â¤Î¡£¹¶·â¼Ô¤Ï¡¢ÆÃÊ̤˺ٹ©¤µ¤ì¤¿¥ê¥¯¥¨¥¹¥È¤òFortiManager¤ËÁ÷¿®¤¹¤ë¤³¤È¤Ç¡¢Ç¤°Õ¤Î¥³¡¼¥É¤ò¼Â¹Ô¤·¤¿¤ê¡¢¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤·¤¿¤ê¤¹¤ë¤³¤È¤¬²Äǽ¤Ë¤Ê¤ë¡£
¡¡¹¶·â¼Ô¤Ï¤³¤ÎÀȼåÀ¤ò°ÍѤ·¤Æ¡¢´ÉÍýÂоݥǥХ¤¥¹¤ÎIP¥¢¥É¥ì¥¹¡¢»ñ³Ê¾ðÊó¡¢ÀßÄê¤ò´Þ¤à¤µ¤Þ¤¶¤Þ¤Ê¥Õ¥¡¥¤¥ë¤òFortiManager¥µ¡¼¥Ð¡¼¤«¤éÅð¤ß½Ð¤·¤¿¡£Åð¤Þ¤ì¤¿¾ðÊó¤Ï¡¢´ë¶È¥Í¥Ã¥È¥ï¡¼¥¯¤äMSP¤Î²¼Î®¤Î¸ÜµÒ¤Ø¤ÎºÇ½é¤Î¥¢¥¯¥»¥¹¤òÆÀ¤ë¤¿¤á¤Ë¡¢FortiGate¥Ç¥Ð¥¤¥¹¤ò³Ø½¬¤·¡¢É¸Åª¤Ë¤¹¤ë¤¿¤á¤Ë»ÈÍѤµ¤ì¤ë²ÄǽÀ¤¬¤¢¤ë¡£
|
|
¡¡Fortinet¤Ï¡¢¿¯³²¤µ¤ì¤¿FortiManager¥µ¡¼¥Ð¤Ë¥Þ¥ë¥¦¥§¥¢¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤¿¤ê¡¢´ÉÍýÂоݤÎFortiGate¥Ç¥Ð¥¤¥¹¤Ø¤ÎÀßÄêÊѹ¹¤¬¹Ô¤ï¤ì¤¿¤ê¤·¤¿¤È¤¤¤¦¾Úµò¤Ï¤Ê¤¤¤È¤·¤Æ¤¤¤ë¡£
¡¡ÊÆGoogle Cloud»±²¼¤ÎMandiant¤Ï¡¢UNC5820¤È¸Æ¤Ð¤ì¤ë¶¼°Ò½¸ÃĤ¬¤³¤ÎÀȼåÀ¤ò6·î27Æü¤«¤é°ÍѤ·¤Æ¤¤¤¿¤³¤È¤¬ÌÀ¤é¤«¤Ë¤Ê¤Ã¤¿¤È¤·¤Æ¤¤¤ë¡£¤³¤Î½¸ÃĤϡ¢°ÍѤµ¤ì¤¿FortiManager¤Ë¤è¤Ã¤Æ´ÉÍý¤µ¤ì¤Æ¤¤¤ëFortiGate¥Ç¥Ð¥¤¥¹¤Î¹½À®¥Ç¡¼¥¿¤ò¥¹¥Æ¡¼¥¸¥ó¥°¤·¡¢È´¤½Ð¤·¤Æ¤¤¤¿¤È¤¤¤¦¡£È´¤½Ð¤µ¤ì¤¿¥Ç¡¼¥¿¤Ï¡¢FortiManager¤ò¤µ¤é¤Ë¿¯³²¤·¡¢ºÇ½ªÅª¤Ë´ë¶È´Ä¶¤òɸŪ¤Ë¤¹¤ë¤¿¤á¤Ë»ÈÍѤµ¤ì¤ë²ÄǽÀ¤¬¤¢¤ë¤È¤·¤Æ¤¤¤ë¡£
¡¡Fortinet¤Ï¡¢¤³¤ÎÀȼåÀ¤ËÂн褹¤ë¤¿¤á¤Î¥»¥¥å¥ê¥Æ¥£¥¢¥Ã¥×¥Ç¡¼¥È¤ò¥ê¥ê¡¼¥¹¤·¤Æ¤¤¤ë¡£¤Þ¤¿¡¢¥¢¥Ã¥×¥Ç¡¼¥È¤ò¤¹¤°¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤Ç¤¤Ê¤¤¾ì¹ç¤ËÈ÷¤¨¡¢¹¶·â¤ò·Ú¸º¤¹¤ë¤¿¤á¤Î¤µ¤Þ¤¶¤Þ¤ÊÊýË¡¤âÄ󶡤·¤Æ¤¤¤ë¡£¾ÜºÙ¤Ï¸ø¼°¥µ¥¤¥È¤ò»²¾È¤µ¤ì¤¿¤¤¡£
|
|
|
|
Copyright(C) 2024 ITmedia Inc. All rights reserved. µ»ö¡¦¼Ì¿¿¤Î̵ÃÇžºÜ¤ò¶Ø¤¸¤Þ¤¹¡£
·ÇºÜ¾ðÊó¤ÎÃøºî¸¢¤ÏÄ󶡸µ´ë¶È¤Ëµ¢Â°¤·¤Þ¤¹¡£
¾®³ØÀ¸¤¬¼Õºá¡¢À¿¼Â¤ÊÂбþ¤Ë´¶·ã¡Ê¼Ì¿¿¡§¤Þ¤¤¤É¤Ê¥Ë¥å¡¼¥¹¡Ë82
¾®³ØÀ¸¤¬¼Õºá¡¢À¿¼Â¤ÊÂбþ¤Ë´¶·ã¡Ê¼Ì¿¿¡§¤Þ¤¤¤É¤Ê¥Ë¥å¡¼¥¹¡Ë82