{"id":19014,"date":"2026-05-05T09:56:41","date_gmt":"2026-05-05T00:56:41","guid":{"rendered":"https:\/\/jore2.com\/community-7582-securing-a-dod-contractor-finding-a-multi-tenant-authorization-vulnerability\/"},"modified":"2026-05-05T09:56:41","modified_gmt":"2026-05-05T00:56:41","slug":"community-7582-securing-a-dod-contractor-finding-a-multi-tenant-authorization-vulnerability","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=19014","title":{"rendered":"\uc2a4\ud0c0\ud2b8\uc5c5 \ubcf4\uc548\uc758 \uc228\uc740 \uc57d\uc810, \ub2e4\uc911 \ud14c\ub10c\ud2b8 \uad8c\ud55c \ucde8\uc57d\uc810\uc774 \ud654\uc81c\uc778 \uc774\uc720"},"content":{"rendered":"<div class=\"jore2-editor-byline\">\n<p><strong>\uc774\uac00\uc740<\/strong><\/p>\n<\/div>\n<p>\ucd5c\uadfc \uad6d\ubc29\ubd80 \uc0b0\ud558 \uacc4\uc57d\uc0ac\ub97c \ub300\uc0c1\uc73c\ub85c \ud55c \ubcf4\uc548 \uc810\uac80 \uacb0\uacfc\uac00 \ub514\uc9c0\ud138 \uc5c5\uacc4\uc5d0\uc11c \ud070 \ud30c\uc7a5\uc744 \uc77c\uc73c\ud0a4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ud575\uc2ec\uc740 \ub2e8\uc21c\ud55c \ubc84\uadf8 \ud558\ub098\uac00 \uc544\ub2c8\ub77c, \uae09\uc131\uc7a5\ud558\ub294 \uc2a4\ud0c0\ud2b8\uc5c5\ub4e4\uc774 \uacf5\ud1b5\uc801\uc73c\ub85c \uacaa\uace0 \uc788\ub294 \uad6c\uc870\uc801 \ubcf4\uc548 \uc57d\uc810\uc774 \ub4dc\ub7ec\ub0ac\ub2e4\ub294 \uc810\uc785\ub2c8\ub2e4. \ud2b9\ud788 \uc5ec\ub7ec \uace0\uac1d\uc774 \ud558\ub098\uc758 \uc2dc\uc2a4\ud15c\uc744 \uacf5\uc720\ud558\ub294 \ub2e4\uc911 \ud14c\ub10c\ud2b8 \ud658\uacbd\uc5d0\uc11c \uad8c\ud55c \ubd84\ub9ac\uac00 \uc81c\ub300\ub85c \ub418\uc9c0 \uc54a\uc544 \uad70\uc0ac \ud6c8\ub828 \ub370\uc774\ud130\uac00 \ub178\ucd9c\ub420 \ubed4\ud55c \uc0ac\uc548\uc774 \uc8fc\ubaa9\ubc1b\uc558\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub2e8\uc21c\ud788 \ud55c \ud68c\uc0ac\uc758 \uc2e4\uc218\ub97c \ub118\uc5b4, \ube60\ub978 \uc18d\ub3c4\ub85c \uc11c\ube44\uc2a4\ub97c \ud655\uc7a5\ud558\ub294 \ud604\ub300 \uc2a4\ud0c0\ud2b8\uc5c5 \uc0dd\ud0dc\uacc4\uac00 \uc548\uace0 \uc788\ub294 \ubcf4\ud3b8\uc801\uc778 \ub9ac\uc2a4\ud06c\ub97c \uc801\ub098\ub77c\ud558\uac8c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>\n<p>\uc774 \ubb38\uc81c\uac00 \ud654\uc81c\uac00 \ub41c \ubc30\uacbd\uc5d0\ub294 \uc804\ud1b5\uc801\uc778 \ubcf4\uc548 \uc778\ub825\uc758 \ubd80\uc7ac\uac00 \uc790\ub9ac \uc7a1\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub9ce\uc740 \uc2a4\ud0c0\ud2b8\uc5c5\uc774 \uc790\uae08 \uc870\ub2ec\uc5d0 \ub2a5\ud55c \ucc3d\uc5c5\uc790\ub098 \ub514\uc790\uc778, API \uc5f0\ub3d9\uc5d0 \ub2a5\ud55c \uc77c\ubc18 \uc778\ub825\uc73c\ub85c \ud300\uc744 \uafb8\ub9ac\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc2b5\ub2c8\ub2e4. \ubc18\uba74 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uad6c\uc870\ub098 \ud50c\ub7ab\ud3fc \ubcf4\uc548\uc5d0 \uc815\ud1b5\ud55c \uc804\ubb38\uac00\ub294 \uc0c1\ub300\uc801\uc73c\ub85c \ub4dc\ubb38 \ud3b8\uc785\ub2c8\ub2e4. \ubca0\ub974\uc140\uc774\ub098 \uc218\ud30c\ubca0\uc774\uc2a4 \uac19\uc740 \ucd5c\uc2e0 \ud074\ub77c\uc6b0\ub4dc \uc11c\ube44\uc2a4\uc758 \ud655\uc0b0\uc774 \uc624\ud788\ub824 \uc774 \ubb38\uc81c\ub97c \ubd80\ucd94\uae30\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud658\uacbd\uc5d0\uc11c \uac1c\ubc1c\uc790\ub4e4\uc740 \ubcf4\uc548 \uc124\uc815\uc774 \uae30\ubcf8\uc73c\ub85c \ub41c \uc0c1\ud0dc\uac00 \uc544\ub2cc, \ud074\ub77c\uc774\uc5b8\ud2b8 \uce21\uc5d0 API \ud0a4\ub97c \ub178\ucd9c\ud558\uac70\ub098 \ud589 \ub2e8\uc704 \uad8c\ud55c \uc81c\uc5b4 \uc5c6\uc774 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \ubc30\ud3ec\ud558\ub294 \ub4f1 \uae30\ucd08\uc801\uc778 \uc2e4\uc218\ub97c \ubc18\ubcf5\ud558\uac8c \ub429\ub2c8\ub2e4.<\/p>\n<p>\uc774\ub7ec\ud55c \ud750\ub984 \uc18d\uc5d0\uc11c \uae30\uc874 \ubcf4\uc548 \uc5c5\uccb4\uc5d0 \ub300\ud55c \ubd88\ub9cc\uacfc \ud568\uaed8 \uc0c8\ub85c\uc6b4 \ub300\uc548\uc73c\ub85c AI \uae30\ubc18 \ud39c\ud14c\uc2a4\ud305\uc774 \ub5a0\uc624\ub974\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uacfc\uac70\uc5d0\ub294 \uc218\ub9cc \ub2ec\ub7ec\ub97c \ub4e4\uc5ec \uc678\ubd80 \uc804\ubb38 \uc5c5\uccb4\uc5d0 \uc758\ub8b0\ud574\ub3c4 \uacb0\uacfc\uac00 \ub9cc\uc871\uc2a4\ub7fd\uc9c0 \ubabb\ud558\uac70\ub098, \uc2a4\ud0c0\ud2b8\uc5c5\uc758 \ube60\ub978 \uac1c\ubc1c \uc18d\ub3c4\ub97c \ub530\ub77c\uac00\uc9c0 \ubabb\ud558\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc558\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \ucd5c\uadfc\uc5d0\ub294 \uc624\ud508 \uc18c\uc2a4 \uae30\ubc18\uc758 AI \ub3c4\uad6c\ub4e4\uc774 \uae30\uc874 \uace0\uac00 \uc11c\ube44\uc2a4\ubcf4\ub2e4 \ud6e8\uc52c \uc800\ub834\ud558\uba74\uc11c\ub3c4 \ub354 \uc815\ubc00\ud55c \uacb0\uacfc\ub97c \ub0b4\ub193\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc2e4\uc81c\ub85c \ud55c \uc0ac\ub840\uc5d0\uc11c\ub294 50 \ub2ec\ub7ec\uc9dc\ub9ac AI \ub3c4\uad6c\uac00 1 \ub9cc \ub2ec\ub7ec\uc9dc\ub9ac \uc678\ubd80 \uc5c5\uccb4 \ubcf4\uace0\uc11c\ubcf4\ub2e4 \ud6e8\uc52c \ub6f0\uc5b4\ub09c \uc131\ub2a5\uc744 \ubcf4\uc5ec\uc8fc\uba70, \ucd5c\uace0 \uae30\uc220 \ucc45\uc784\uc790\ub97c \ub180\ub77c\uac8c \ud558\uae30\ub3c4 \ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc55e\uc73c\ub85c \uc8fc\ubaa9\ud574\uc57c \ud560 \uc810\uc740 \ubcf4\uc548 \uc810\uac80 \ubc29\uc2dd\uc758 \uadfc\ubcf8\uc801\uc778 \ubcc0\ud654\uc785\ub2c8\ub2e4. \uacfc\uac70\ucc98\ub7fc \uc77c \ub144\uc5d0 \ud55c \ubc88\uc529 \uc678\ubd80 \uc5c5\uccb4\ub97c \ubd88\ub7ec\uc11c \uc810\uac80\ud558\ub294 \ubc29\uc2dd\ubcf4\ub2e4\ub294, \uac1c\ubc1c \uc18d\ub3c4\uc5d0 \ub9de\ucdb0 \uc2e4\uc2dc\uac04\uc73c\ub85c \ucde8\uc57d\uc810\uc744 \ucc3e\uc544\ub0b4\ub294 AI \uae30\ubc18 \uc811\uadfc\uc774 \ud45c\uc900\uc774 \ub420 \uac00\ub2a5\uc131\uc774 \ud07d\ub2c8\ub2e4. \ud2b9\ud788 \ub2e4\uc911 \ud14c\ub10c\ud2b8 \ud658\uacbd\uc5d0\uc11c\uc758 \uad8c\ud55c \ubd84\ub9ac \ubb38\uc81c\ub294 \ub370\uc774\ud130\uac00 \uc911\uc694\ud574\uc9c8\uc218\ub85d \ub354\uc6b1 \uce58\uba85\uc801\uc778 \ubcc0\uc218\uac00 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc81c \uae30\uc5c5\ub4e4\uc740 \ub2e8\uc21c\ud788 \uae30\ub2a5\uc744 \ube60\ub974\uac8c \ub9cc\ub4dc\ub294 \uac83\ubfd0\ub9cc \uc544\ub2c8\ub77c, \uadf8 \uc548\uc5d0 \uc228\uaca8\uc9c4 \ubcf4\uc548 \uad6c\uc870\uac00 \uc5bc\ub9c8\ub098 \uacac\uace0\ud55c\uc9c0\ub97c \uc2a4\uc2a4\ub85c \uc810\uac80\ud560 \uc218 \uc788\ub294 \uc5ed\ub7c9\uc744 \uac16\ucdb0\uc57c \ud560 \uc2dc\uc810\uc774 \uc654\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\uad70\uc218\uc6a9 \uacc4\uc57d\uc744 \ub530\ub0b8 \uc2a4\ud0c0\ud2b8\uc5c5\uc774 \ubcf4\uc548 \uc810\uac80\uc5d0\uc11c \uce58\uba85\uc801\uc778 \ub2e4\uc911 \ud14c\ub10c\ud2b8 \uad8c\ud55c \ucde8\uc57d\uc810\uc744 \ub4dc\ub7ec\ub0b4\uba70 \uc5c5\uacc4\uc758 \uc774\ubaa9\uc744 \ub04c\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ube60\ub978 \uc18d\ub3c4\ub85c \uc131\uc7a5\ud558\ub294 \ud658\uacbd\uc5d0\uc11c \ubcf4\uc548 \uc804\ubb38\uac00\uc758 \ubd80\uc7ac\uac00 \uc5b4\ub5bb\uac8c \ub370\uc774\ud130 \uc720\ucd9c\ub85c \uc774\uc5b4\uc9c0\ub294\uc9c0, \uadf8\ub9ac\uace0 AI \uae30\ubc18 \ud14c\uc2a4\ud2b8\uac00 \uae30\uc874 \ubc29\uc2dd\ubcf4\ub2e4 \uc5bc\ub9c8\ub098 \ud6a8\uc728\uc801\uc778\uc9c0 \uc0b4\ud3b4\ubd05\ub2c8\ub2e4.<\/p>\n","protected":false},"author":4,"featured_media":19013,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[406],"tags":[7,14219,14218,4196,14217],"class_list":["post-19014","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-406","tag-ai","tag-14219","tag-14218","tag-4196","tag-14217"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",720,539,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734-150x150.jpg",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734-300x225.jpg",300,225,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",640,479,false],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",640,479,false],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",720,539,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",720,539,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734.jpg",720,539,false],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/05\/nisi20230323-0001224537-web-20230323152918-20230328093407734-590x410.jpg",590,410,true]},"author_info":{"info":["\uc774\uac00\uc740"]},"category_info":"<a href=\"https:\/\/jore2.com\/?cat=406\" rel=\"category\">\uc694\uc998\ub728\ub294\uc18c\uc2dd<\/a>","tag_info":"\uc694\uc998\ub728\ub294\uc18c\uc2dd","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/19014","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19014"}],"version-history":[{"count":0,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/19014\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/19013"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19014"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19014"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19014"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}