CVE:CVE-2018-18850
CNNVD:CNNVD-201810-1529
Octopus Deploy是澳大利亚Octopus Deploy公司的一款用于.NET、Java等应用程序的开发部署的自动化工具。
Octopus Deploy 2018.8.0版本至2018.9.0版本中存在安全漏洞。攻击者可通过上传恶意制作的YAML配置利用该漏洞执行任意代码。
solution:Upgrade octopus octopus_server to a higher version than 2018.8.12,2018.9.1,and avoid the version [2018.8.0,2018.8.12],[2018.9.0,2018.9.1)
solution:Upgrade polycom unified_communications_software to a higher version than 5.8.0.12848,and avoid the version (,5.8.0.12848]; Upgrade polycom vvx_601_firmware to a higher version than -; Upgrade polycom vvx_500_firmware to a higher version than -