#6
A06:2021
Vulnerable and Outdated Components
Components such as libraries, frameworks, and other software modules run with the same privileges as the application. If a vulnerable component is exploited, it can cause serious data loss.
概要
Previously titled Using Components with Known Vulnerabilities. It is #2 in the Top 10 community survey but also had enough data to make the Top 10 via data analysis.
攻撃者がこれを悪用する方法
攻撃パターンを理解することで、より優れた防御を構築できます。これらはセキュリティチームが監視する技術です。
Known vulnerability exploitation
Attackers target publicly disclosed vulnerabilities in popular libraries before applications are patched.
検出シグナル:
Exploit attempts matching known CVE patterns, targeting specific library endpoints
Supply chain compromise
Malicious code is introduced through compromised or typosquatted packages.
検出シグナル:
Unexpected network connections, unusual package behaviors
予防方法
- Remove unused dependencies, features, components, and documentation
- Continuously inventory component versions and their dependencies
- Monitor sources like CVE and NVD for vulnerabilities in components
- Only obtain components from official sources over secure links
- Monitor for unmaintained libraries that don't receive security patches
- Use virtual patching via web application firewall if needed
Shoulder検出付きCWE (1)
これらのCWEにはShoulder検出ルールがあります。クリックして特定の脆弱性と修正を確認してください。
その他のマップされたCWE (2)
これらのCWEはこのカテゴリにマップされていますが、まだShoulderルールがありません。