Source |
The Hacker News |
Identifiant |
8390869 |
Date de publication |
2023-10-03 14:59:00 (vue: 2023-10-03 11:06:44) |
Titre |
Le chercheur révèle de nouvelles techniques pour contourner le pare-feu de Cloudflare \\ et la protection DDOS Researcher Reveals New Techniques to Bypass Cloudflare\\'s Firewall and DDoS Protection |
Texte |
Le pare-feu et les mécanismes de prévention des attaques de déni de service (DDOS) distribués dans Cloudflare peuvent être contournés en exploitant les lacunes dans les contrôles de sécurité croisés, en battant le but même de ces garanties, a-t-il émergé.
"Les attaquants peuvent utiliser leurs propres comptes CloudFlare pour abuser de la relation de confiance par conception entre CloudFlare et les sites Web des clients, rendant le
Firewall and distributed denial-of-service (DDoS) attack prevention mechanisms in Cloudflare can be circumvented by exploiting gaps in cross-tenant security controls, defeating the very purpose of these safeguards, it has emerged.
"Attackers can utilize their own Cloudflare accounts to abuse the per-design trust-relationship between Cloudflare and the customers\' websites, rendering the |
Envoyé |
Oui |
Condensat |
abuse accounts attack attackers between bypass can circumvented cloudflare controls cross customers ddos defeating denial design distributed emerged exploiting firewall gaps has mechanisms new own per prevention protection purpose relationship rendering researcher reveals safeguards security service techniques tenant these trust utilize very websites |
Tags |
Threat
|
Stories |
|
Notes |
★★★
|
Move |
|