葛兰素史克在进博会展出多项呼吸疾病诊疗技术

yun2025

葛兰素史克在进博会展出多项呼吸疾病诊疗技术

2FAuth：反向代理身份标头缺少来源验证

11月7日公开的漏洞记录CVE-2026-63439涉及2FAuth。这款应用用于保管双因素认证账户并生成安全码。启用反向代理认证后，应用会读取请求头作为用户身份，却未核对请求是否真正来自已经配置的可信代理。受影响的是采用这种特定认证方式的实例，风险来自代理与应用之间的信任关系。版本清单标出的受影响范围包括低于8.0.0。

这条记录给出的CVSS 3.1基础评分为9.8分，分级为严重。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制，衡量这条记录所描述情形下的技术严重性。

https://v.youku.com/v_show/id_XNjU3OTA1NjUwOA==.html
https://v.youku.com/v_show/id_XNjU4ODczOTA5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODczOTAxNg==.html
https://v.youku.com/v_show/id_XNjU3OTA1OTMxNg==.html
https://v.youku.com/v_show/id_XNjU4ODczNDIwMA==.html
https://v.youku.com/v_show/id_XNjU4ODczNDE5Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA1OTI2OA==.html
https://v.youku.com/v_show/id_XNjU3OTA1OTI0OA==.html
https://v.youku.com/v_show/id_XNjU4ODczNzE4MA==.html
https://v.youku.com/v_show/id_XNjU4ODczNzE4NA==.html
https://v.youku.com/v_show/id_XNjU3OTA1MDM2NA==.html
https://v.youku.com/v_show/id_XNjU4ODczMjY0MA==.html
https://v.youku.com/v_show/id_XNjU4ODczMzk1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODczMzg2NA==.html
https://v.youku.com/v_show/id_XNjU4ODczODU5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODczODU0OA==.html
https://v.youku.com/v_show/id_XNjU3OTA1MzI5Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA1NDUyMA==.html
https://v.youku.com/v_show/id_XNjU4ODczODQ3Mg==.html
https://v.youku.com/v_show/id_XNjU3OTA0NzEwNA==.html
https://v.youku.com/v_show/id_XNjU3OTA1MTU2NA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NzA4MA==.html
https://v.youku.com/v_show/id_XNjU3OTA1MzEwNA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NTU1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTA0MzgyOA==.html
https://v.youku.com/v_show/id_XNjU3OTA0MjI4MA==.html
https://v.youku.com/v_show/id_XNjU3OTA0ODMxMg==.html
https://v.youku.com/v_show/id_XNjU3OTA0OTczNg==.html
https://v.youku.com/v_show/id_XNjU3OTA0NTI0OA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NTA0OA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NjYyMA==.html
https://v.youku.com/v_show/id_XNjU3OTA0MDY4NA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NjYwNA==.html
https://v.youku.com/v_show/id_XNjU3OTA0NjU3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODcyNzcwOA==.html
https://v.youku.com/v_show/id_XNjU3OTAzOTAwOA==.html
https://v.youku.com/v_show/id_XNjU3OTAzODk2OA==.html
https://v.youku.com/v_show/id_XNjU3OTAzNzQ2OA==.html
https://v.youku.com/v_show/id_XNjU3OTAzNzQ0OA==.html
https://v.youku.com/v_show/id_XNjU3OTA0MTcwMA==.html
https://v.youku.com/v_show/id_XNjU3OTAzNzI2OA==.html
https://v.youku.com/v_show/id_XNjU4ODcyMTUyOA==.html
https://v.youku.com/v_show/id_XNjU4ODcyNzQ2MA==.html
https://v.youku.com/v_show/id_XNjU4ODcyMTUxMg==.html
https://v.youku.com/v_show/id_XNjU4ODcyNzQ0NA==.html
https://v.youku.com/v_show/id_XNjU4ODcyMTQ0MA==.html
https://v.youku.com/v_show/id_XNjU4ODcyNzM2MA==.html
https://v.youku.com/v_show/id_XNjU4ODcyMTMzNg==.html
https://v.youku.com/v_show/id_XNjU3OTAzODYyNA==.html
https://v.youku.com/v_show/id_XNjU3OTAzNzA2OA==.html