{"id":845,"date":"2016-09-09T14:36:09","date_gmt":"2016-09-09T19:36:09","guid":{"rendered":"https:\/\/cert.pa\/?p=845"},"modified":"2016-09-09T15:10:36","modified_gmt":"2016-09-09T20:10:36","slug":"wordpress-publica-actualizacion-de-seguridad","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=845","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2016-09-Actualizacion de Seguridad Urgente para WordPress a 4.6.1"},"content":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2016-09-Actualizacion de Seguridad Urgente para WordPress a 4.6.1<br \/>\nFecha de publicaci\u00f3n: Septiembre, 2016<br \/>\nFecha de modificaci\u00f3n: Septiembre, 2016<br \/>\n\u00daltima revisi\u00f3n: Revisi\u00f3n A.<\/p>\n<p>Sistemas Afectados<\/p>\n<p>Versiones inferiores a 4.6.1<\/p>\n<p>I. Descripci\u00f3n<\/p>\n<p>Se ha publicado la versi\u00f3n 4.6.1 de WordPress que tiene como objetivo solucionar dos vulnerabilidades que podr\u00edan permitir ataques de tipo XSS (cross site scripting) y de escalada de directorios (path traversal). Adem\u00e1s est\u00e1 versi\u00f3n contiene la correcci\u00f3n de otros 15 fallos (desde la versi\u00f3n 4.6) no relacionados directamente con problemas de seguridad.<\/p>\n<p>CSIRT Panam\u00e1 recomienda a los usuarios y administradores revisar el aviso de seguridad liberado por WordPress y actualizarlo a la \u00faltima versi\u00f3n.<\/p>\n<p>II. Impacto<br \/>\nUn atacante remoto podr\u00eda tomar control de un sitio web afectado.<\/p>\n<p>III. Referencia a soluciones.<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"0quUABg5F0\"><p><a href=\"https:\/\/wordpress.org\/news\/2016\/09\/wordpress-4-6-1-security-and-maintenance-release\/\">WordPress 4.6.1 Security and Maintenance Release<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;WordPress 4.6.1 Security and Maintenance Release&#8221; &#8212; WordPress News\" src=\"https:\/\/wordpress.org\/news\/2016\/09\/wordpress-4-6-1-security-and-maintenance-release\/embed\/#?secret=7LrlB7JtPB#?secret=0quUABg5F0\" data-secret=\"0quUABg5F0\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"ySeJ2hGZe1\"><p><a href=\"https:\/\/wptavern.com\/wordpress-4-6-1-released-patches-two-security-vulnerabilities\">WordPress 4.6.1 Released, Patches Two Security Vulnerabilities<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;WordPress 4.6.1 Released, Patches Two Security Vulnerabilities&#8221; &#8212; WP Tavern\" src=\"https:\/\/wptavern.com\/wordpress-4-6-1-released-patches-two-security-vulnerabilities\/embed#?secret=HoRQ0RDZvE#?secret=ySeJ2hGZe1\" data-secret=\"ySeJ2hGZe1\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p>IV. Informaci\u00f3n de contacto<br \/>\nCSIRT PANAMA<br \/>\nComputer Security Incident Response Team Autoridad Nacional para la<br \/>\nInnovacion Gubernamental<br \/>\nE-Mail: info@cert.pa<br \/>\nPhone: +507 520-CERT (2378)<br \/>\nWeb: https:\/\/cert.pa<br \/>\nTwitter: @CSIRTPanama<br \/>\nFacebook: http:\/\/www.facebook.com\/CSIRTPanama<br \/>\nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2016-09-Actualizacion de Seguridad Urgente para WordPress a 4.6.1 Fecha de publicaci\u00f3n: Septiembre, 2016 Fecha de modificaci\u00f3n: Septiembre, 2016 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Sistemas Afectados Versiones inferiores a 4.6.1 I. Descripci\u00f3n Se ha&#8230;<\/p>\n","protected":false},"author":5,"featured_media":846,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[76,72,73,14],"class_list":["post-845","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad","tag-actualizaciones","tag-avisos-de-seguridad","tag-parches","tag-wordpress"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=845"}],"version-history":[{"count":2,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/845\/revisions"}],"predecessor-version":[{"id":848,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/845\/revisions\/848"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/846"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}