中国地质大学（武汉）牵头共建“地质星座”应用研发中心

yun2025

中国地质大学（武汉）牵头共建“地质星座”应用研发中心

Tracecat：部署配置可能关闭单点登录签名检查

11月7日公开的漏洞记录CVE-2026-58490涉及Tracecat。这个安全自动化平台支持通过SAML进行单点登录。采用特定容器编排方式部署时，两项本应要求签名的设置可能被渲染成空值，覆盖应用较严格的默认行为。可访问认证接收端的外部请求因而有机会提交未经可信身份方签署的数据。版本清单标出的受影响范围包括不低于0.37.0且低于1.0.0-beta.49。

这条记录给出的CVSS 3.1基础评分为9.8分，分级为严重。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODAyMzIzNg==.html
https://v.youku.com/v_show/id_XNjU4ODAyNDg0MA==.html
https://v.youku.com/v_show/id_XNjU4ODAyNDgyOA==.html
https://v.youku.com/v_show/id_XNjU4ODAyNDgyNA==.html
https://v.youku.com/v_show/id_XNjU3ODMyODA0NA==.html
https://v.youku.com/v_show/id_XNjU4ODAyMDEwMA==.html
https://v.youku.com/v_show/id_XNjU3ODMyNTI4MA==.html
https://v.youku.com/v_show/id_XNjU4ODAyMTY5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMyODAzMg==.html
https://v.youku.com/v_show/id_XNjU3ODMyNTI1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODAyMTY0NA==.html
https://v.youku.com/v_show/id_XNjU4ODAxNzUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODMyNjYyOA==.html
https://v.youku.com/v_show/id_XNjU4ODAxODU0OA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMDc1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzYyOA==.html
https://v.youku.com/v_show/id_XNjU4ODAxNzQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzYxNg==.html
https://v.youku.com/v_show/id_XNjU3ODMxNzQ3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzU2MA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzU0MA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMyMDU1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMyMjA2MA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTg0MA==.html
https://v.youku.com/v_show/id_XNjU4ODAxMjgwMA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzQyNA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTc5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODAxNTkwMA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNzI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzM4OA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzM4MA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTc2OA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMDQwNA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMTk1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODAxNTg1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODAxNTg0NA==.html
https://v.youku.com/v_show/id_XNjU3ODMxODg2NA==.html
https://v.youku.com/v_show/id_XNjU4ODAxNTgyNA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTcwMA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzM0NA==.html
https://v.youku.com/v_show/id_XNjU3ODMyMzM0MA==.html
https://v.youku.com/v_show/id_XNjU4ODAxMjY3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTY4NA==.html
https://v.youku.com/v_show/id_XNjU3ODMxNTY3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMxNzE0OA==.html
https://v.youku.com/v_show/id_XNjU4ODAxNzA3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMxODc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODMxODc3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODMyMTg2NA==.html