{"id":1408,"date":"2019-06-17T15:04:07","date_gmt":"2019-06-17T20:04:07","guid":{"rendered":"https:\/\/cert.pa\/?p=1408"},"modified":"2019-06-17T15:29:13","modified_gmt":"2019-06-17T20:29:13","slug":"csirt-panama-aviso-2019-06-17-anuncio-de-seguridad-joomla-endurecimiento-del-acl-com_joomlaupdate","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1408","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2019-06-17 Anuncio de seguridad Joomla- Endurecimiento del ACL com_joomlaupdate"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p>Gravedad: baja<br>\nFecha de publicaci\u00f3n: 12 junio 2019<br>\nFecha de modificaci\u00f3n: 12 junio 2019<br>\nTipo de explotaci\u00f3n: control de acceso incorrecto<br>\nN\u00famero de CVE: CVE-2019-12764<br>\nFuente: developer.joomla.org<\/p>\n\n\n\n<p>Sistemas Afectados<br>\n\u2022 Versiones de Joomla! de la: 3.8.13 a 3.9.6.<\/p>\n\n\n\n<p>I. Descripci\u00f3n<br> Se ha publicado una nueva actualizaci\u00f3n de seguridad del gestor de contenidos Joomla! que da soluci\u00f3n a varias vulnerabilidades, entre las mencionadas la URL del servidor de actualizaci\u00f3n de com_joomlaupdate, que puede ser manipulada por usuarios que no sean Super-Admin.<\/p>\n\n\n\n<p>II. Soluci\u00f3n<\/p>\n\n\n\n<p>Si la versi\u00f3n que tienes instalada se encuentra entre las citadas anteriormente, te recomendamos que actualices a la \u00faltima Actualizar a la versi\u00f3n 3.9.7, que encontrar\u00e1s en la web oficial de Joomla! o desde el panel de administraci\u00f3n del propio gestor de contenidos. <br>\nLink de descarga: https:\/\/downloads.joomla.org\/co\/<\/p>\n\n\n\n<p>III. Referencia a soluciones, herramientas e informaci\u00f3n<br>\nhttps:\/\/developer.joomla.org\/security-centre\/785-20190603-core-acl-hardening-of-com-joomlaupdate<br>\nURL:http:\/\/www.securityfocus.com\/bid\/108729<\/p>\n\n\n\n<p>IV. Informaci\u00f3n de contacto<br>\nCSIRT PANAMA<br>\nAutoridad Nacional para la Innovaci\u00f3n Gubernamental<br>\nE-mail: info@cert.pa<br>\nWeb:&nbsp;&nbsp; http:\/\/cert.pa<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gravedad: baja Fecha de publicaci\u00f3n: 12 junio 2019 Fecha de modificaci\u00f3n: 12 junio 2019 Tipo de explotaci\u00f3n: control de acceso incorrecto N\u00famero de CVE: CVE-2019-12764 Fuente: developer.joomla.org Sistemas Afectados \u2022 Versiones de Joomla! de la:&#8230;<\/p>\n","protected":false},"author":6,"featured_media":460,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1408","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1408"}],"version-history":[{"count":2,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1408\/revisions"}],"predecessor-version":[{"id":1413,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1408\/revisions\/1413"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/460"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}