The Ministry of Industry and Information Technology of China announced that the open-source programming language PHP contained 2 serious vulnerabilities and urged companies to strengthen security because affected servers could be remotely controlled.
The Ministry of Industry and Information Technology of China announced that the open-source programming language PHP contained 2 serious vulnerabilities. The published information indicated that exploiting these vulnerabilities could allow hackers to remotely control affected servers. The announcement was reportedly made on the 22nd, prompting moves to encourage specific fixes and patch deployment.
The article said that the vulnerabilities had increased the need for organizations to strengthen the security of their servers. In particular, organizations may be urged to apply the latest security updates and review their configurations to prevent unauthorized access targeting vulnerabilities in publicly available code.
The report was based on coverage by Bloomberg and was strongly characterized as a government warning. Verification of the scope of the impact and the release of additional countermeasure information may continue, and the companies concerned will need to monitor official announcements.