NotLegit Vulnerability Azure App Service Imapangitsa Khodi Yopezeka Pagulu

Katswiri wa chitetezo Wiz akuchenjeza za chiwopsezo mu Microsoft's Azure App Service. Kusatetezeka kumawulula mazana a ma source code repositories. Microsoft yatulutsa kale chigambacho.

Wiz adapeza zomwe zimatchedwa kuti NotLegit vulnerability mu Azure App Service. Ntchitoyi, yomwe imadziwikanso kuti Azure Web Apps, ndi nsanja yochitira mawebusayiti komanso kugwiritsa ntchito intaneti. Nambala yochokera ndi zinthu zakale zitha kukwezedwa ku Azure App Service pogwiritsa ntchito chida cha Local Git. Ogwiritsa ntchito amatha kukhazikitsa chosungira cha Local Git ndi chidebe cha Azure App Service ndikukankhira codeyo mwachindunji ku seva.

Malinga ndi ochita kafukufuku, apa ndi pamene chiwopsezo chagona. Mukamagwiritsa ntchito Local Git kutulutsa kachidindo ku Azure App Service, git repository idakhazikitsidwa ndi bukhu lopezeka pagulu lomwe aliyense atha kulipeza.

Zilankhulo zingapo zamakhodi zakhudzidwa

Makamaka ma code code olembedwa mu PHP, Python, Ruby kapena Node ndiwowopsa. Izi zili choncho chifukwa zilankhulo zamtunduwu nthawi zambiri zimagwiritsa ntchito ma seva apache, Nginx ndi Flask. Ma seva awa sangathe kugwira mafayilo a web.config. Izi zimalola kuti anthu azipeza zomwe zidanenedwazo.

Amadziwika ndi Microsoft

Akatswiri achitetezo ku Wiz adadziwitsa kale Microsoft za chiwopsezochi kumayambiriro kwa Okutobala chaka chino. Microsoft idatsekapo. Mulimonsemo, akatswiriwa amalimbikitsa ogwiritsa ntchito kuti ayang'ane ngati magwero awo awululidwa ndikuchitapo kanthu pazogwiritsa ntchito.