UMicrosoft ukhuphe iinkcukacha ezongezelelweyo malunga nokuhlaselwa ethe yabeka esichengeni izibonelelo ze I-SolarWinds ephumeze umnyango ongasemva kwiqonga lolawulo lwezixhobo zenethiwekhi zeSolarWinds Orion, ezazisetyenziswa kwinethiwekhi yecandelo likaMicrosoft.
Uhlalutyo lwesiganeko lubonise ukuba abahlaseli bafumane ukufikelela kwezinye iiakhawunti zeshishini likaMicrosoft kwaye ngexesha lophicotho-zincwadi, kwavezwa ukuba ezi akhawunti bezisetyenziselwa ukufikelela kugcino lwangaphakathi nekhowudi yemveliso yeMicrosoft.
Kutyholwa ukuba amalungelo eeakhawunti ezisengozini avunyelwe kuphela ukuba abone ikhowudi, kodwa khange babonelele ngesakhono sokwenza utshintsho.
UMicrosoft uqinisekisile kubasebenzisi ukuba ubungqina obongezelelweyo buqinisekisile ukuba akukho lutshintsho lwenziweyo kwindawo yokugcina izinto.
Kwakhona, akukho mkhondo wabahlaseli 'abanokufikelela kwiinkcukacha zabathengi bakaMicrosoft. iinzame zokubeka esichengeni iinkonzo ezibonelelweyo kunye nokusetyenziswa kwezixhobo zikaMicrosoft ukwenza uhlaselo kwezinye iinkampani.
Ukusukela kuhlaselo lweSolarWinds kukhokelele ekungenisweni kwendlu engasemva hayi kuphela kwinethiwekhi kaMicrosoft, kodwa nakwezinye iinkampani ezininzi kunye neearhente zikarhulumente usebenzisa imveliso yeSolarWinds Orion.
Uhlaziyo lwangaphandle lweSolarWinds Orion ifakiwe kwiziseko ezingaphezulu kwe-17.000 zabaxumi ukusuka kwi-SolarWinds, kubandakanya i-425 yeenkampani ezichaphazelekileyo ze-Fortune 500, kunye namaziko amakhulu ezemali kunye neebhanki, amakhulu eeyunivesithi, amacandelo amaninzi omkhosi wase-US kunye ne-UK, i-White House, i-NSA, iSebe likaRhulumente lase-US I-USA kunye nePalamente yaseYurophu.
Abathengi beSolarWinds bakwabandakanya iinkampani ezinkulu ezinje ngeCisco, AT&T, Nokia, NEC, Lucent, MasterCard, Visa USA, Level 3 kunye Nokia.
Indawo yangasemva ivumele ukufikelela okukude kuthungelwano lwangaphakathi lwabasebenzisi beSolarWinds Orion. Utshintsho olubi lwathunyelwa ngeenguqulelo zeSolarWinds Orion 2019.4 - 2020.2.1 ikhutshwe ukusuka ngoMatshi ukuya kuJuni 2020.
Ngexesha lohlalutyo lwesiganeko, Ukungahoywa kokhuseleko kuvele kubanikezeli beenkqubo ezinkulu zeshishini. Kucingelwa ukuba ukufikelela kwiziseko zophuhliso zeSolarWinds kwafunyanwa ngeakhawunti kaMicrosoft Office 365.
Abahlaseli bafumene ukufikelela kwisatifikethi se-SAML esisetyenziselwa ukutyikitywa kwedijithali kwaye basebenzise esi satifikethi ukuvelisa amathokheni amatsha avumela ukufikelela kwilungelo kwinethiwekhi yangaphakathi.
Ngaphambi koku, ngo-Novemba ngo-2019, abaphandi bezokhuseleko bangaphandle baqaphela ukusetyenziswa kwephasiwedi encinci "SolarWind123" yokufikelela ekubhaleni kwiseva ye-FTP kunye nohlaziyo lwemveliso yeSolarWinds, kunye nokuvuza kwephasiwedi yabasebenzi. ukusuka kwi-SolarWinds kwindawo yokugcina izinto ze-git.
Ukongeza, emva kokuchongwa kwendlu yangasemva, iSolarWinds iqhubekile nokusasaza uhlaziyo ngolunya kangangexesha elithile kwaye ayisirhoxisanga kwangoko isatifikethi esisetyenziselwe ukusayina iimveliso zaso ngokwamanani. ).
Ukuphendula kwizikhalazo kwiinkqubo zokulumkisa ezikhutshwe ziinkqubo zokufumanisa okungalunganga, Abathengi bakhuthaziwe ukuba bakhubaze ukungqinisisa ngokususa izilumkiso ezingezizo.
Ngaphambi koko, abameli beSolarWinds bagxeka imodeli yokuvula imithombo evulekileyo, bethelekisa ukusetyenziswa komthombo ovulekileyo wokutya ifolokhwe emdaka kwaye besithi imodeli yophuhliso evulekileyo ayikuthinteli ukubonakala kweebhukumaka kwaye yimodeli yokuthengisa kuphela enokubonelela. ukulawula ikhowudi.
Ukongeza, iSebe lezoBulungisa lase-U.S liveze ulwazi oluthi abahlaseli bafumana ukufikelela kwiseva ye-imeyile yoMphathiswa ngokusekwe kwiqonga likaMicrosoft Office 365. Olu hlaselo lukholelwa ukuba luveze imixholo yeebhokisi zeposi zabasebenzi abangama-3.000 boMphathiswa.
Ngokwabo, iNew York Times kunye neReuters, ngaphandle kokuchaza umthombo, ingxelo yophando lwe-FBI Kwikhonkco elinokubakho phakathi kweJetBrains kunye nokuzibandakanya kweSolarWinds. I-SolarWinds isebenzise iQelaCity inkqubo yokudityaniswa eqhubekayo ebonelelwa yiJetBrains.
Kucingelwa ukuba abahlaseli banokuthi bafumane ukufikelela ngenxa yokuseta okungachanekanga okanye ukusetyenziswa kwenguqulelo yexesha leQela leQela eliqulathe ubungozi obungafakwanga.
Umlawuli weJetBrains uyichithile intelekelelo malunga nonxibelelwano Yenkampani enolu hlaselo kwaye yabonisa ukuba khange kunxibelelwane nabo zii-arhente zokunyanzeliswa komthetho okanye abameli beSolarWinds malunga nokuzibophelela okunokubakho yiTeamCity kwizibonelelo zeSolarWinds.
Umthombo: https://msrc-blog.microsoft.com