Genian NAC Security Advisories =================================================================================== Last Updated: 2024-04-01 Security Vulnerability ---------------------------------- .. csv-table:: :header: "Fixed Versions", "Key", "Components", "Description", "Affects Versions", "CVSS Score" :class: datatable :widths: 10 10 15 50 15 10 "5.0.72 (R)","`GN-26504 <https://ims.genians.com/jira/browse/GN-26504>`_","WebUI","CWP를 통한 내부 ë„¤íŠ¸ì›Œí¬ ì •ë³´ 조회 가능한 취약ì ","5.0.0, 6.0.0",4.3 "5.0.68","`GN-26452 <https://ims.genians.com/jira/browse/GN-26452>`_","WebUI","사용ìžì˜ 변경불가 ì •ë³´ë¥¼ ìˆ˜ì •í• ìˆ˜ 있는 취약ì ","5.0.0, 6.0.0",2.2 "5.0.62","`GN-26723 <https://ims.genians.com/jira/browse/GN-26723>`_","WebUI","관리ìžì˜ 권한 변경시 즉시 ë°˜ì˜ ì•ˆë˜ëŠ” 취약ì ìˆ˜ì •","",3.3 "5.0.61, 5.0.56, 5.0.55 (LTS)","`GN-28063 <https://ims.genians.com/jira/browse/GN-28063>`_","WebUI","노드관리 ê²€ìƒ‰ë°”ì— Blind Injection 가능한 ë¬¸ì œ","",2.2 "5.0.60, 5.0.56, 5.0.55 (LTS)","`GN-27242 <https://ims.genians.com/jira/browse/GN-27242>`_","WebUI","NAC 5.0ì—ì„œ ì‚¬ìš©ìž ê²€ìƒ‰ í™”ë©´ì„ í†µí•´ì„œ sql injectionì´ ê°€ëŠ¥í•œ 취약ì ","5.0.15",4.8 "5.0.60, 5.0.56, 5.0.55 (LTS)","`GN-27107 <https://ims.genians.com/jira/browse/GN-27107>`_","WebUI","권한 없는 관리ìžë¡œ ì¸í•œ Tomcat ìž¬êµ¬ë™ ëª…ë ¹ 수행으로 서비스 ë¬´ë ¥í™”","5.0.41",2.7 "5.0.58, 5.0.56, 5.0.55 (LTS)","`GN-26393 <https://ims.genians.com/jira/browse/GN-26393>`_","WebUI","ì ‘ê·¼ 권한 없는 페ì´ì§€ì— ì§ì ‘ URLì„ ìž…ë ¥í•˜ì—¬ ì •ë³´ ìˆ˜ì •ì´ ê°€ëŠ¥í•œ 취약ì ","",3.1 "5.0.58, 5.0.56, 5.0.55 (LTS)","`GN-26390 <https://ims.genians.com/jira/browse/GN-26390>`_","WebUI","ê°ì‚¬ë¡œê·¸ REST API를 통한 권한 없는 관리ìžì˜ íŒŒì¼ ë‚´ë³´ë‚´ê¸° 권한 우회 취약ì ","",3.1 "5.0.57, 5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26315 <https://ims.genians.com/jira/browse/GN-26315>`_","WebUI","2단계 ì¸ì¦ì—ì„œ ì¸ì¦ì½”ë“œ ìž…ë ¥ê°’ íšŸìˆ˜ì œí•œ, ì‹œê°„ì œí•œí•˜ë„ë¡ ê°œì„ ","",4.3 "5.0.57, 5.0.56, 5.0.55 (LTS)","`GN-27492 <https://ims.genians.com/jira/browse/GN-27492>`_","WebUI","Tomcat Version Upgrade (8.5.94 -> 8.5.96 / 9.0.81 -> 9.0.83)","",7.5 "5.0.57, 5.0.56, 5.0.55 (LTS)","`GN-27278 <https://ims.genians.com/jira/browse/GN-27278>`_","WebUI","Tomcat Version Upgrade (8.5.94 / 9.0.81)","",7.5 "5.0.57, 5.0.56, 5.0.42","`GN-26600 <https://ims.genians.com/jira/browse/GN-26600>`_","WebUI","ë¹„ì •ìƒ api 호출 후 ë¡œê·¸ì¸ ë˜ì§€ 않는 ë¬¸ì œ","5.0.42, 5.0.49, 6.0.7, 4.0.156, 5.0.56",5.3 "5.0.56, 5.0.55 (LTS), 5.0.53, 5.0.42","`GN-26814 <https://ims.genians.com/jira/browse/GN-26814>`_","Center","Bufferoverflow ì— ëŒ€í•œ 코드 ê°œì„ ","",2 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26865 <https://ims.genians.com/jira/browse/GN-26865>`_","WebUI","대시보드 ìœ„ì ¯ ì„¤ì •ì—ì„œ XSS ìž…ë ¥ 취약ì ","",1.2 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26835 <https://ims.genians.com/jira/browse/GN-26835>`_","Center","ë°ì´í„° ì—…ë°ì´íŠ¸ì— 사용ë˜ëŠ” SQLì„ í†µí•œ Command Injection 취약ì ","",6.6 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26833 <https://ims.genians.com/jira/browse/GN-26833>`_","Sensor","ì„¼ì„œì˜ NMDB ì—…ë°ì´íŠ¸ ê³¼ì •ì—ì„œ nmap 스í¬ë¦½íŠ¸ 변조 취약ì ","",4.1 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26725 <https://ims.genians.com/jira/browse/GN-26725>`_","Linux Agent, macOS Agent, Windows Agent","[Agent] 센터 ë° ì„¼ì„œì—ì„œ ì „ì†¡ëœ ì´ë²¤íŠ¸ì— 대한 ìœ íš¨ì„± 검사 추가","",6.3 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26696 <https://ims.genians.com/jira/browse/GN-26696>`_","Sensor","ì„¼ì„œì˜ ìˆ˜ì‹ ì´ë²¤íŠ¸ì— 대한 ê²€ì¦ ë¯¸í¡","",6.3 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26694 <https://ims.genians.com/jira/browse/GN-26694>`_","Center","다운로드 URL ê²€ì¦ ë¯¸í¡ìœ¼ë¡œ ì¸í•œ Parameter Injection 취약ì ","",6.6 "5.0.56, 5.0.55 (LTS), 5.0.42","`GN-26383 <https://ims.genians.com/jira/browse/GN-26383>`_","WebUI","html/script 코드 주입 가능한 취약ì ","",5.3 "5.0.56, 5.0.55 (LTS)","`GN-26935 <https://ims.genians.com/jira/browse/GN-26935>`_","WebUI","부서명으로 ì¶œë ¥ëœ html tagê°€ treeì—ì„œ 실행ë˜ëŠ” 취약ì ","5.0.0",1.2 "5.0.55 (LTS)","`GN-26222 <https://ims.genians.com/jira/browse/GN-26222>`_","WebUI","관리콘솔 ë‚´ 페ì´ì§€ ì´ë™ì‹œ 사용하는 returnUrl 파ë¼ë¯¸í„°ë¥¼ 변조하여 리다ì´ë ‰íŠ¸ í• ìˆ˜ 있는 ë¬¸ì œ","",1.9 "5.0.54, 5.0.53, 5.0.50, 5.0.42","`GN-26460 <https://ims.genians.com/jira/browse/GN-26460>`_","Windows Agent","ì—ì´ì „트를 통해 ì¼ë°˜ 사용ìžê°€ PC ê´€ë¦¬ìž ê¶Œí•œì„ íšë“í• ìˆ˜ 있는 취약ì ","5.0.0, 6.0.0",4.6 "5.0.54, 5.0.53, 5.0.50, 5.0.42","`GN-26392 <https://ims.genians.com/jira/browse/GN-26392>`_","WebUI","권한 없는 관리ìžê°€ 디버그 로그 다운로드 가능한 취약ì ","",2.9 "5.0.54, 5.0.53, 5.0.50, 5.0.42","`GN-26368 <https://ims.genians.com/jira/browse/GN-26368>`_","WebUI","관리ìžì˜ API 키가 다른 관리ìžì—게 노출ë˜ëŠ” 취약ì ","",5.3 "5.0.54","`GN-26391 <https://ims.genians.com/jira/browse/GN-26391>`_","WebUI","권한 없는 관리ìžê°€ 디버그로그 실시간 보기 가능한 취약ì ","5.0.0, 6.0.0",2.9 "5.0.53, 5.0.50, 5.0.42","`GN-26286 <https://ims.genians.com/jira/browse/GN-26286>`_","WebUI","Google OTP 2단계 ì¸ì¦ì—ì„œ 보안키를 ì‹ ê·œë¡œ 발급받아 2단계 ì¸ì¦ì„ í†µê³¼í• ìˆ˜ 있는 ë¬¸ì œ","",6.5 "5.0.53, 5.0.50, 5.0.42","`GN-26205 <https://ims.genians.com/jira/browse/GN-26205>`_","Database","mysql ë²„ì „ ì—…ê·¸ë ˆì´ë“œ 5.7.40 -> 5.7.41","", "5.0.53, 5.0.50, 5.0.42","`GN-26062 <https://ims.genians.com/jira/browse/GN-26062>`_","Center, macOS Agent, Sensor, Windows Agent","OpenSSL 1.1.1t ì—…ê·¸ë ˆì´ë“œ - ìž„ì˜ í¬ì¸í„°ë¥¼ memcmp í˜¸ì¶œì— ì „ë‹¬í•˜ì—¬ 메모리 ë‚´ìš©ì„ ì½ê±°ë‚˜ 서비스 거부를 ìœ ë°œí• ìˆ˜ 있ìŒ","",7.4 "5.0.53, 5.0.50","`GN-26150 <https://ims.genians.com/jira/browse/GN-26150>`_","WebUI","Tomcat version upgrade (9.0.68 -> 9.0.72, 8.5.78 -> 8.5.86)","", "5.0.53, 5.0.50","`GN-25869 <https://ims.genians.com/jira/browse/GN-25869>`_","CWP","IP관리 메시지 ìš°ì„ On ì¼ë•Œ ì—ì´ì „트 ì‚¬ìš©ìž ì¸ì¦ 메뉴로 CWP ì¸ì¦ ì‹œ ê³„ì •(ID)으로만 ì¸ì¦ ë˜ëŠ” ë¬¸ì œ","6.0.3, 5.0.46",3.4 "5.0.51, 5.0.50, 5.0.42","`GN-26000 <https://ims.genians.com/jira/browse/GN-26000>`_","MySQL","mysql ë²„ì „ ì—…ê·¸ë ˆì´ë“œ 5.7.33 -> 5.7.40","", "5.0.50, 5.0.42","`GN-26051 <https://ims.genians.com/jira/browse/GN-26051>`_","WebUI","5.0 WebUI lib 취약ì í•ëª© ì ê²€","", "5.0.50, 5.0.42","`GN-25982 <https://ims.genians.com/jira/browse/GN-25982>`_","WebUI","WebUI Response Headerì— CSP, HSTS Header 추가 ","", "5.0.50, 5.0.42","`GN-25925 <https://ims.genians.com/jira/browse/GN-25925>`_","IPMGMT, WebUI","IP ì‹ ì²ì‹œìŠ¤í…œ > IPì‹ ì² í™”ë©´ XSS 가능한 ë¬¸ì œ","",5.4 "5.0.50, 5.0.42","`GN-25875 <https://ims.genians.com/jira/browse/GN-25875>`_","Windows Agent","ì—ì´ì „트가 웹브ë¼ìš°ì € ì‹¤í–‰í• ë•Œ High권한 가지는 ë¬¸ì œ","4.0.0, 5.0.0, 6.0.0",3.3 "5.0.50, 5.0.42","`GN-25847 <https://ims.genians.com/jira/browse/GN-25847>`_","WebUI","CWP 화면ì—ì„œ ì‚¬ìš©ìž ì •ë³´ ìˆ˜ì • 페ì´ì§€ ì ‘ê·¼ì‹œ 재ì¸ì¦ ì ˆì°¨ 추가","",4.2 "5.0.50, 5.0.42","`GN-25740 <https://ims.genians.com/jira/browse/GN-25740>`_","WebUI","ê°ì‚¬ > 로그 > 로그검색바ì—ì„œ XSSê°€ 가능한 ë¬¸ì œ","",5.6 "5.0.50","`GN-25811 <https://ims.genians.com/jira/browse/GN-25811>`_","IPMGMT","IP ì‹ ì²ì‹œìŠ¤í…œì—ì„œ frontpage를 통해 사용ìžID 만으로 ë¡œê·¸ì¸ ê°€ëŠ¥í•œ ë¬¸ì œ","",4.9 "5.0.50","`GN-25250 <https://ims.genians.com/jira/browse/GN-25250>`_","WebUI","HTML Tag 문ìžì—´ ë’¤ì— /를 붙ì´ëŠ” 경우 XSSê°€ 가능한 ë¬¸ì œ ","",4.9 "5.0.50","`GN-23677 <https://ims.genians.com/jira/browse/GN-23677>`_","Center, Sensor","센서 ì •ì±…ì„œë²„ 등ë¡ì‹œ 보안성 강화를 위한 ê´€ë¦¬ìž ìŠ¹ì¸ ì‹œìŠ¤í…œ","",7.9 "5.0.49, 5.0.42","`GN-25753 <https://ims.genians.com/jira/browse/GN-25753>`_","WebUI","CWP ì—ì„œ PAGEFW 파ë¼ë¯¸í„°ë¥¼ 통한 불법 경로로 리다ì´ë ‰íŠ¸ 하지 ì•Šë„ë¡ ê°œì„ ","",4.2 "5.0.49, 5.0.42","`GN-25561 <https://ims.genians.com/jira/browse/GN-25561>`_","WebUI","노드검색바 Blind SQL Injection 취약ì ","",5.3 "5.0.49, 5.0.42","`GN-25184 <https://ims.genians.com/jira/browse/GN-25184>`_","Sensor","DNS Cache Poisoning 공격방어를 위해서 Dnsmasq ì—ì„œ 쿼리 결과를 ìºì‰¬í•˜ì§€ ì•Šë„ë¡ ìˆ˜ì •","",3.7 "5.0.49, 5.0.42","`GN-25119 <https://ims.genians.com/jira/browse/GN-25119>`_","macOS Agent","macOS Agent, OpenVPN(2.5.7) ë° OpenSSL(1.1.1q) ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ","",5.3 "5.0.49","`GN-25193 <https://ims.genians.com/jira/browse/GN-25193>`_","WebUI","[범용OS Ubuntu] 관리콘솔 > CWP Design Template ëª©ë¡ íŽ˜ì´ì§€ 'X-Frame-Options' Header ê°€ allowallë¡œ 표시ë˜ëŠ” ë¬¸ì œ","",6.5 "5.0.48, 5.0.42","`GN-25438 <https://ims.genians.com/jira/browse/GN-25438>`_","Center, Sensor","_filelist.html 파ì¼ì„ 센터마다 다르게 ìƒì„±í•˜ë„ë¡ ê°œì„ ","",3 "5.0.48, 5.0.42","`GN-25306 <https://ims.genians.com/jira/browse/GN-25306>`_","WebUI","사용하지 않는 HTTP-Method를 통해 사용가능 method ì •ë³´ê°€ ì¶œë ¥ë˜ëŠ” ë¬¸ì œ","",5.3 "5.0.47, 5.0.42","`GN-25104 <https://ims.genians.com/jira/browse/GN-25104>`_","Center, macOS Agent, Sensor, Windows Agent","OpenSSL ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.1.1q)","",5.3 "5.0.47, 5.0.42","`GN-25064 <https://ims.genians.com/jira/browse/GN-25064>`_","WebUI","웹서비스 취약ì Apache WAS ì •ë³´ë¥¼ 노출하지 ì•Šë„ë¡ ê°œì„ ","4.0.119, 5.0.16",2.5 "5.0.47","`GN-23947 <https://ims.genians.com/jira/browse/GN-23947>`_","Windows Agent","윈ë„ìš° ì—ì´ì „트 ì‹œí어코딩 ì 검결과 취약ì 패치","5.0.0, 6.0.0", "5.0.46, 5.0.42","`GN-24917 <https://ims.genians.com/jira/browse/GN-24917>`_","Center, macOS Agent, Sensor, Windows Agent","OpenSSL ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.1.1o)","",9.8 "5.0.46, 5.0.42","`GN-24908 <https://ims.genians.com/jira/browse/GN-24908>`_","WebUI","Tomcat version upgrade (8.5.78)","",8.6 "5.0.46, 5.0.42","`GN-24851 <https://ims.genians.com/jira/browse/GN-24851>`_","Center","Apache HTTP Server 2.4.53 ì—…ê·¸ë ˆì´ë“œ","",9.8 "5.0.45, 5.0.42","`GN-24689 <https://ims.genians.com/jira/browse/GN-24689>`_","WebUI","ê°ì‚¬ > 로그 > 로그검색ì—ì„œ XSSê°€ 가능한 ë¬¸ì œ","",4.3 "5.0.45, 5.0.42","`GN-24687 <https://ims.genians.com/jira/browse/GN-24687>`_","WebUI","디버그로그 화면ì—ì„œ ìƒëŒ€ê²½ë¡œë¡œ íŒŒì¼ ì ‘ê·¼ 가능한 ë¬¸ì œ","",3.83 "5.0.45, 5.0.42","`GN-24651 <https://ims.genians.com/jira/browse/GN-24651>`_","Center, macOS Agent, Windows Agent","OpenSSL ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.1.1n)","4.0.0, 5.0.0, 6.0.0",7.5 "5.0.45, 5.0.42","`GN-24535 <https://ims.genians.com/jira/browse/GN-24535>`_","WebUI","logstash ì œê±°","",5.9 "5.0.44, 5.0.42","`GN-24305 <https://ims.genians.com/jira/browse/GN-24305>`_","GNOS","Apache 취약ì 조치를 위한 2.4.52 ë²„ì „ ì—…ê·¸ë ˆì´ë“œ","",9.8 "5.0.44, 5.0.42","`GN-24253 <https://ims.genians.com/jira/browse/GN-24253>`_","WebUI","log4j 취약ì ê°œì„ ","",9.8 "5.0.42","`GN-24030 <https://ims.genians.com/jira/browse/GN-24030>`_","GNOS","ì œí’ˆì— í¬í•¨ëœ netcat(nc) ëª…ë ¹ì—ì„œ reverse shell 기능 ì œê±°","", "5.0.42","`GN-24014 <https://ims.genians.com/jira/browse/GN-24014>`_","Center","HTTPë¡œ 호출가능한 SOAP/REST ì œí•œ","",2.5 "5.0.42","`GN-23981 <https://ims.genians.com/jira/browse/GN-23981>`_","macOS Agent, Windows Agent","ì—ì´ì „íŠ¸ì— UDP ì´ë²¤íŠ¸ì˜ 패킷 ì¡°ìž‘ì„ í†µí•œ ë¹„ì •ìƒ ì¢…ë£Œ ë¬¸ì œ","",3.4 "5.0.42","`GN-23977 <https://ims.genians.com/jira/browse/GN-23977>`_","macOS Agent, Windows Agent","ì—ì´ì „트ì—ì„œ ì¸ìŠ¤í„´íŠ¸ 메시지 í‘œì‹œí• ë•Œ 존재하는 XSS 취약ì ìˆ˜ì •","",6.8 "5.0.42","`GN-23972 <https://ims.genians.com/jira/browse/GN-23972>`_","Center, Sensor","UDP event 패킷처리시 ë°ëª¬ ë¹„ì •ìƒ ì¢…ë£Œ 가능한 ë¬¸ì œ","5.0.36",6.4 "5.0.42","`GN-23970 <https://ims.genians.com/jira/browse/GN-23970>`_","WebUI","ëª¨ë°”ì¼ ì•±ì„ ì´ìš©í•œ ê´€ë¦¬ìž ë¡œê·¸ì¸ ìš°íšŒ 취약ì ","",6.1 "5.0.42","`GN-23967 <https://ims.genians.com/jira/browse/GN-23967>`_","WebUI","REST API Command Injection","",6.7 "5.0.42","`GN-23966 <https://ims.genians.com/jira/browse/GN-23966>`_","WebUI","CWP ì‚¬ìš©ìž ì‹ ì²ì‹œ Excel 파ì¼ë¡œ ì‹ ì²ë˜ëŠ” 경우 XSS 공격 가능 취약ì ","",6.8 "5.0.42","`GN-23965 <https://ims.genians.com/jira/browse/GN-23965>`_","WebUI","Agent Download 페ì´ì§€ì—ì„œ ìƒëŒ€ê²½ë¡œë¥¼ 통한 내부 íŒŒì¼ ë‹¤ìš´ë¡œë“œ 취약ì ","5.0.37",5.2 "5.0.42","`GN-23794 <https://ims.genians.com/jira/browse/GN-23794>`_","WebUI","REST API 호출시 ìœ íš¨í•œ ì¸ì¦ í† ê·¼ì´ ì¡´ìž¬í•˜ì§€ ì•Šì•„ë„ í˜¸ì¶œ 가능한 ë¬¸ì œ","",4.9 "5.0.42","`GN-23743 <https://ims.genians.com/jira/browse/GN-23743>`_","Center","API를 통한 서비스 거부 공격(DoS, Denial of Service) 취약ì ê°œì„ ","",6.4 "5.0.42","`GN-23714 <https://ims.genians.com/jira/browse/GN-23714>`_","Center","ì¸ì¦ì²˜ë¦¬ê°€ 미비한 ì—ì´ì „íŠ¸ê´€ë ¨ API 보완","",4.6 "5.0.42","`GN-23708 <https://ims.genians.com/jira/browse/GN-23708>`_","Center","ì¸ì¦ì²˜ë¦¬ê°€ 미비한 ì„¼ì„œê´€ë ¨ API 보완","",4.6 "5.0.42","`GN-23706 <https://ims.genians.com/jira/browse/GN-23706>`_","Center","내부ì 으로 사용ë˜ëŠ” SOAP APIê°€ RPC를 통해 외부로 ë…¸ì¶œëœ ì·¨ì•½ì ","", "5.0.42","`GN-23705 <https://ims.genians.com/jira/browse/GN-23705>`_","WebUI","(KVE-2021-1062) Conf Engine ì—ì„œ íŒŒì¼ ì—…ë¡œë“œ ì»´í¬ë„ŒíŠ¸ì˜ ì´ë¦„ ìœ íš¨ì„± ì²´í¬ ê°•í™”","",6.7 "5.0.42","`GN-23702 <https://ims.genians.com/jira/browse/GN-23702>`_","WebUI","(KVE-2021-1062) CWP Design Templateì—ì„œ SSTI 취약ì ","", "5.0.42","`GN-23701 <https://ims.genians.com/jira/browse/GN-23701>`_","Windows Agent","(KVE-2021-1062) Agent íŒŒì¼ ìƒì„±ì‹œ ìƒëŒ€ê²½ë¡œë¥¼ ì‚¬ìš©í• ìˆ˜ 있는 취약ì ","",6.1 "5.0.42","`GN-23700 <https://ims.genians.com/jira/browse/GN-23700>`_","Center","(KVE-2021-1061) ë…¸ë“œì— ì¸ì¦ëœ 사용ìžê°€ 아님ì—ë„ ë¹„ë°€ë²ˆí˜¸ë¥¼ ë³€ê²½í• ìˆ˜ 있는 취약ì ","",8.7 "5.0.42","`GN-23699 <https://ims.genians.com/jira/browse/GN-23699>`_","Center, Sensor","(KVE-2021-1061) ì„¼ì„œì •ë³´ ì—†ì´ ëª¨ë“ ë…¸ë“œì˜ ì •ë³´ë¥¼ ì–»ì„ ìˆ˜ 있는 취약ì ","", "5.0.42","`GN-23663 <https://ims.genians.com/jira/browse/GN-23663>`_","macOS Agent, Windows Agent","ì—ì´ì „트 OpenSSL 1.1.1l ì—…ë°ì´íŠ¸","",9.8 "5.0.42","`GN-23662 <https://ims.genians.com/jira/browse/GN-23662>`_","GNOS","openssl ë²„ì „ 1.1.1l ë¡œ ì—…ê·¸ë ˆì´ë“œ","4.0.146, 5.0.44, 6.0.1",9.8 "5.0.42","`GN-23578 <https://ims.genians.com/jira/browse/GN-23578>`_","WebUI","REST API 취약ì ê°œì„ ","",6.8 "5.0.42","`GN-23563 <https://ims.genians.com/jira/browse/GN-23563>`_","Center","Command injection 공격 방어를 위한 ìˆ˜ì •","",8 "5.0.42","`GN-23533 <https://ims.genians.com/jira/browse/GN-23533>`_","Center","사용불가 플러그ì¸ì´ ì—ì´ì „트로 ì „ë‹¬ë˜ì§€ ì•Šë„ë¡ ê°œì„ ","",7.6 "5.0.42","`GN-23500 <https://ims.genians.com/jira/browse/GN-23500>`_","Center","SQL Injection ë°©ì–´ 처리방법 ê°œì„ ","",8.7 "5.0.42","`GN-23499 <https://ims.genians.com/jira/browse/GN-23499>`_","GNOS","GNOS 내부 취약한 LD_LIBRARY_PATH 환경변수 ì œê±°","", "5.0.42","`GN-23488 <https://ims.genians.com/jira/browse/GN-23488>`_","WebUI","[SaaS] SaaS 보안ì¸ì¦ WAS(Tomcat) 취약ì ê°œì„ ","",7.5 "5.0.42","`GN-23446 <https://ims.genians.com/jira/browse/GN-23446>`_","gnlogin, WebUI","ë¹„ë°€ë²ˆí˜¸ì— íŠ¹ì •ë‹¨ì–´ë¥¼ ì‚¬ìš©í• ìˆ˜ ì—†ë„ë¡ ì²˜ë¦¬","",8.7 "5.0.42","`GN-23377 <https://ims.genians.com/jira/browse/GN-23377>`_","GNOS","openssh ë²„ì „ 8.6p1 으로 ì—…ê·¸ë ˆì´ë“œ","", "5.0.42","`GN-23358 <https://ims.genians.com/jira/browse/GN-23358>`_","WebUI","[CC] Web 취약성 ì 검결과 보안","",6.5 "5.0.42","`GN-23237 <https://ims.genians.com/jira/browse/GN-23237>`_","GenianOS","Apache httpd(2.4.48) / tomcat(8.5.63) ì—…ê·¸ë ˆì´ë“œ","",7.5 "5.0.42","`GN-23233 <https://ims.genians.com/jira/browse/GN-23233>`_","ElasticSearch","[CC] elasticsearch 5.6.16 ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ","",8.8 "5.0.42","`GN-23055 <https://ims.genians.com/jira/browse/GN-23055>`_","WebUI","ì‹œí어코딩 ì ê²€ ê²°ê³¼ 취약ì 패치 - javascript","5.0.42", "5.0.42","`GN-22473 <https://ims.genians.com/jira/browse/GN-22473>`_","Center","ì‹œí어코딩ì 검결과 ê°œì„ - 불충분한 ëžœë¤ ê°’ 사용","",7.5 "5.0.41","`GN-22872 <https://ims.genians.com/jira/browse/GN-22872>`_","-Unknown/None-","openssl 1.1.1k 패치","",7.4 "5.0.41","`GN-22747 <https://ims.genians.com/jira/browse/GN-22747>`_","Database","GNOS MySQL 5.7 ì—…ê·¸ë ˆì´ë“œ","", "5.0.41","`GN-22558 <https://ims.genians.com/jira/browse/GN-22558>`_","-Unknown/None-","DNSMASQ 취약ì ìˆ˜ì •ì„ ìœ„í•œ ë²„ì „ ì—…ê·¸ë ˆì´ë“œ","",8.1 "5.0.41","`GN-22551 <https://ims.genians.com/jira/browse/GN-22551>`_","WebUI","ì‹œí어코딩 ì ê²€ ê²°ê³¼ 취약ì 패치 - ìžë°” 코드","",9.3 "5.0.41","`GN-22475 <https://ims.genians.com/jira/browse/GN-22475>`_","Center","ì‹œí어코딩ì 검결과 ê°œì„ - ì¡°ì¹˜ì—†ì´ ì˜¤ë¥˜ ì¡°ê±´ ê°ì§€","",1.8 "5.0.41","`GN-21728 <https://ims.genians.com/jira/browse/GN-21728>`_","-Unknown/None-","OpenSSL ì—…ê·¸ë ˆì´ë“œ ( 1.0.2u -> 1.1.1j )","",9.8 "5.0.40","`GN-22461 <https://ims.genians.com/jira/browse/GN-22461>`_","WebUI","Tomcat ë²„ì „ ì—…ê·¸ë ˆì´ë“œ(7.0.104 --> 7.0.107 / 8.5.55 --> 8.5.61)","",5.9 "5.0.39","`GN-21985 <https://ims.genians.com/jira/browse/GN-21985>`_","WebUI","관리콘솔 취약ì ê°œì„ (XSS 공격, ì—러코드 노출)","",4.3 "5.0.38","`GN-21396 <https://ims.genians.com/jira/browse/GN-21396>`_","WebUI","노드관리 검색바ì—ì„œ ì‚¬ìš©í• ìˆ˜ 없는 sql 문법 ë° ì‹œìŠ¤í…œ 변수 ì œí•œí•˜ë„ë¡ ê°œì„ ","",4.5 "5.0.37","`GN-21879 <https://ims.genians.com/jira/browse/GN-21879>`_","WebUI","CWP 취약ì ì„ í†µí•œ ì¸ì¦ê¶Œí•œ 탈취 ê°œì„ ","",6.2 "5.0.36, 5.0.35","`GN-21843 <https://ims.genians.com/jira/browse/GN-21843>`_","Center","SQL ì¸ì ì…˜ 검사하지 않는 예외 ì²˜ë¦¬ëœ SOAP API ì˜ ì¸ìžê°’ë„ escape 처리 하ë„ë¡ ìˆ˜ì •","", "5.0.35","`GN-21647 <https://ims.genians.com/jira/browse/GN-21647>`_","Database","MySQL ì—…ê·¸ë ˆì´ë“œ (5.6.47 -> 5.6.48)","", "5.0.34","`GN-21766 <https://ims.genians.com/jira/browse/GN-21766>`_","Center","Genian Syncer ì—ì„œ 센터로 업로드시 ê°ì‚¬ë¡œê·¸ ê°œì„ ","", "5.0.34","`GN-21513 <https://ims.genians.com/jira/browse/GN-21513>`_","WebUI","웹 취약ì 으로 501 ì—러가 ë°œìƒí–ˆì„ 경우 ì „ìš© ì—러페ì´ì§€ ì¶œë ¥ë˜ì§€ 않는 ë¬¸ì œ ìˆ˜ì •","",0.6 "5.0.33","`GN-21641 <https://ims.genians.com/jira/browse/GN-21641>`_","macOS Agent, Windows Agent","ì—ì´ì „트 openssl ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.0.2u)","", "5.0.33","`GN-21640 <https://ims.genians.com/jira/browse/GN-21640>`_","GenianOS","openssl ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.0.2u)","", "5.0.33","`GN-21397 <https://ims.genians.com/jira/browse/GN-21397>`_","WebUI","Tomcat ë²„ì „ ì—…ê·¸ë ˆì´ë“œ 7.0.100 --> 7.0.104 / 8.5.51 --> 8.5.55","",7 "5.0.33","`GN-21386 <https://ims.genians.com/jira/browse/GN-21386>`_","GenianOS","Apache httpd 2.4.43 ì—…ê·¸ë ˆì´ë“œ","", "5.0.32","`GN-21181 <https://ims.genians.com/jira/browse/GN-21181>`_","Database","MySQL ì—…ê·¸ë ˆì´ë“œ (5.6.41 -> 5.6.47) ë° íŒŒì¼ê¶Œí•œ 변경","", "5.0.32","`GN-21084 <https://ims.genians.com/jira/browse/GN-21084>`_","WebUI","관리콘솔 취약ì ê°œì„ ","",7.5 "5.0.31","`GN-20848 <https://ims.genians.com/jira/browse/GN-20848>`_","WebUI","보안 취약ì ê°œì„ - 파ì¼ì—…로드 확장ìžìš°íšŒ, webì—ì„œ ì¸ì¦ì—†ì´ /disk/data/customí´ë”ë‚´ 파ì¼ì ‘ê·¼ 등","",5.3 "5.0.30","`GN-20928 <https://ims.genians.com/jira/browse/GN-20928>`_","WebUI","Tomcat ë²„ì „ ì—…ê·¸ë ˆì´ë“œ 7.0.99 --> 7.0.100 / 8.0.53 --> 8.5.51","",4.8 "5.0.30","`GN-20875 <https://ims.genians.com/jira/browse/GN-20875>`_","WebUI","GET ë°©ì‹ì˜ í¬ë¡œìŠ¤ 사ì´íŠ¸ 스í¬ë¦½íŒ… (XSS) 취약ì ê°œì„ ","",1.6 "5.0.30","`GN-20874 <https://ims.genians.com/jira/browse/GN-20874>`_","GNOS","Bash 취약ì (shellshock) 패치","4.1.3", "5.0.28","`GN-20471 <https://ims.genians.com/jira/browse/GN-20471>`_","Center","openssl ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.0.2t)","", "5.0.28","`GN-20443 <https://ims.genians.com/jira/browse/GN-20443>`_","macOS Agent, Windows Agent","ì—ì´ì „트 openssl ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.0.2t)","", "5.0.27","`GN-18882 <https://ims.genians.com/jira/browse/GN-18882>`_","WebUI","OWASP ZAP íˆ´ì— ì˜í•´ ê²€ìƒ‰ëœ ê´€ë¦¬ì½˜ì†” 취약ì ê°œì„ ","", "5.0.21","`GN-19317 <https://ims.genians.com/jira/browse/GN-19317>`_","GenianOS","opensshd 취약ì 으로 ì¸í•œ ë²„ì „ 패치","5.0.8, 4.0.111, 4.0.34", "5.0.19","`GN-19203 <https://ims.genians.com/jira/browse/GN-19203>`_","Center, WebUI","Apache httpd 2.4.39 ì—…ê·¸ë ˆì´ë“œ","", "5.0.17","`GN-19044 <https://ims.genians.com/jira/browse/GN-19044>`_","GenianOS","openssl ìµœì‹ ë²„ì „ìœ¼ë¡œ ì—…ê·¸ë ˆì´ë“œ (OpenSSL 1.0.2r)","", "5.0.17","`GN-18607 <https://ims.genians.com/jira/browse/GN-18607>`_","WebUI","tomcat-connectors ë²„ì „ ì—…ê·¸ë ˆì´ë“œ","",