Retour
-
Titre
IT Security Search vulnerabilities for Meltdown (CVE-2017-5754) and Spectre (CVE-2017-5753 and CVE-2017-5715) (237378) -
Description
Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware vulnerabilities allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of data stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure, it might be possible to steal data from other customers. -
Cause
Due to the nature of these vulnerabilities, which impact kernel mode functions, IT Security Search is indirectly affected. We are constantly monitoring the situation and researching possible ways of preventing the attack in a solution code however, only hardware and/or OS level patches can provide full mitigation/remediation to these issues and these patches are already available.Most expected attack vector is through a JavaScript on a malicious website, so please use Edge and IE on systems patched with corresponding Windows OS patches preventing Spectre/Meltdown exploitation while working with IT Security Search web UI. -
Résolution
Please refer to the below links from platform providers for additional information:Intel:https://newsroom.intel.com/news/intel-responds-to-security-research-findings/Microsoft:https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-inhttps://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-executionVMWare:https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html