#6
A06:2021
Vulnerable and Outdated Components
Components such as libraries, frameworks, and other software modules run with the same privileges as the application. If a vulnerable component is exploited, it can cause serious data loss.
개요
Previously titled Using Components with Known Vulnerabilities. It is #2 in the Top 10 community survey but also had enough data to make the Top 10 via data analysis.
공격자가 이것을 악용하는 방법
공격 패턴을 이해하면 더 나은 방어를 구축하는 데 도움이 됩니다. 이것들은 보안 팀이 주시하는 기술입니다.
Known vulnerability exploitation
Attackers target publicly disclosed vulnerabilities in popular libraries before applications are patched.
탐지 신호:
Exploit attempts matching known CVE patterns, targeting specific library endpoints
Supply chain compromise
Malicious code is introduced through compromised or typosquatted packages.
탐지 신호:
Unexpected network connections, unusual package behaviors
예방 방법
- Remove unused dependencies, features, components, and documentation
- Continuously inventory component versions and their dependencies
- Monitor sources like CVE and NVD for vulnerabilities in components
- Only obtain components from official sources over secure links
- Monitor for unmaintained libraries that don't receive security patches
- Use virtual patching via web application firewall if needed
Shoulder 탐지가 있는 CWE (1)
이 CWE들은 Shoulder 탐지 규칙이 있습니다. 클릭하여 특정 취약점과 수정 사항을 확인하세요.
기타 매핑된 CWE (2)
이 CWE들은 이 카테고리에 매핑되어 있지만 아직 Shoulder 규칙이 없습니다.