{"id":879,"date":"2026-08-21T03:09:49","date_gmt":"2026-08-21T00:09:49","guid":{"rendered":"https:\/\/www.tayfnews.tech\/tr\/genel\/aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi\/"},"modified":"2026-08-21T03:09:49","modified_gmt":"2026-08-21T00:09:49","slug":"aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi","status":"publish","type":"post","link":"https:\/\/www.tayfnews.tech\/tr\/technology\/aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi\/","title":{"rendered":"AWS G\u00fcvenlik A\u00e7\u0131\u011f\u0131: Athena ClickHouse Ba\u011flay\u0131c\u0131s\u0131 Hatas\u0131"},"content":{"rendered":"<p>Amazon Web Services, Athena Federated Query ClickHouse ba\u011flay\u0131c\u0131s\u0131 da\u011f\u0131t\u0131m \u015fablonunda yer alan ve <strong>CVE-2026-75910<\/strong> olarak takip edilen bir yetki atama zafiyetini ele alan resmi bir g\u00fcvenlik b\u00fclteni yay\u0131nlad\u0131. 20.08.2026 tarihinde kamuoyuna duyurulan ve <strong>2026-084-AWS<\/strong> b\u00fclten kimli\u011fiyle tan\u0131mlanan uyar\u0131, acil idari m\u00fcdahale gerektiren \u00f6nemli bir risk profiline dikkat \u00e7ekiyor.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi\/#Athena_Sorgu_Federasyonu_ve_ClickHouse_Baglayicisini_Anlamak\" >Athena Sorgu Federasyonu ve ClickHouse Ba\u011flay\u0131c\u0131s\u0131n\u0131 Anlamak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi\/#Zafiyet_Mekanigi_ve_Potansiyel_Etki\" >Zafiyet Mekani\u011fi ve Potansiyel Etki<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/aws-guvenlik-acigi-athena-clickhouse-baglayicisi-hatasi\/#Risk_Giderme_ve_Gerekli_Eylem\" >Risk Giderme ve Gerekli Eylem<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Athena_Sorgu_Federasyonu_ve_ClickHouse_Baglayicisini_Anlamak\"><\/span>Athena Sorgu Federasyonu ve ClickHouse Ba\u011flay\u0131c\u0131s\u0131n\u0131 Anlamak<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Amazon Athena, standart SQL s\u00f6zdizimini kullanarak do\u011frudan Amazon Simple Storage Service i\u00e7inde veri analizi yap\u0131lmas\u0131na olanak tan\u0131mak \u00fczere tasarlanm\u0131\u015f sunucusuz, etkile\u015fimli bir sorgu hizmeti olarak \u00e7al\u0131\u015f\u0131r. Analitik yetenekleri geni\u015fletmek i\u00e7in Athena Sorgu Federasyonu; kurulu\u015flar\u0131n DynamoDB, Azure Synapse ve \u00f6zel entegrasyonlar dahil olmak \u00fczere farkl\u0131 veri ortamlar\u0131n\u0131 standart SQL ifadeleri kullanarak ba\u011flamas\u0131na olanak tan\u0131r. Bu ba\u011flay\u0131c\u0131lar a\u00e7\u0131k kaynakl\u0131 projeler olarak olu\u015fturulur ve Athena hizmetine da\u011f\u0131t\u0131l\u0131r.<\/p>\n<p>Bununla birlikte g\u00fcvenlik dan\u0131\u015fma kurulu, <strong>v2026.17.1<\/strong> s\u00fcr\u00fcm\u00fcnden \u00f6nce yay\u0131nlanan ClickHouse ba\u011flay\u0131c\u0131 da\u011f\u0131t\u0131m \u015fablonu s\u00fcr\u00fcmlerinin yanl\u0131\u015f bir yetki atama kusurundan muzdarip oldu\u011funa i\u015faret ediyor. Bu yap\u0131sal g\u00f6zden ka\u00e7\u0131rma, kimlik do\u011frulamas\u0131 yapm\u0131\u015f uzaktaki kullan\u0131c\u0131lar\u0131n da\u011f\u0131t\u0131m\u0131 yapan AWS hesab\u0131 i\u00e7inde yer alan hassas verileri potansiyel olarak okuyabilece\u011fi bir g\u00fcvenlik vekt\u00f6r\u00fcn\u00fcn \u00f6n\u00fcn\u00fc a\u00e7\u0131yor.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Zafiyet_Mekanigi_ve_Potansiyel_Etki\"><\/span>Zafiyet Mekani\u011fi ve Potansiyel Etki<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>CVE-2026-75910 kapsam\u0131nda istismar edilen g\u00fcvenlik mekanizmas\u0131, sorgu i\u015flemleri s\u0131ras\u0131nda ba\u011flant\u0131 parametrelerinin manip\u00fcle edilmesini i\u00e7erir. \u00d6zellikle, kimli\u011fi do\u011frulanm\u0131\u015f uzak bir kullan\u0131c\u0131, da\u011f\u0131t\u0131m\u0131 yapan hesap i\u00e7indeki <strong>AWS Secrets Manager<\/strong>&#8216;da depolanan iste\u011fe ba\u011fl\u0131 s\u0131rlar\u0131 hedefleyebilir. Ba\u011flay\u0131c\u0131n\u0131n ba\u011flant\u0131 dizesini, do\u011frudan kullan\u0131c\u0131 kontrol\u00fc alt\u0131nda bir veritaban\u0131 u\u00e7 noktas\u0131n\u0131n yan\u0131 s\u0131ra ilgili olmayan bir s\u0131rra i\u015faret edecek \u015fekilde yap\u0131land\u0131ran ba\u011flay\u0131c\u0131, hedef s\u0131rr\u0131 istem d\u0131\u015f\u0131 olarak do\u011frudan sald\u0131rgan\u0131n kontrol\u00fcndeki u\u00e7 noktaya iletir.<\/p>\n<p>Kapsam ve zafiyet parametrelerine ili\u015fkin temel teknik \u00e7\u0131kar\u0131mlar \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>B\u00fclten Kimli\u011fi:<\/strong> 2026-084-AWS<\/li>\n<li><strong>Etkilenen Kapsam:<\/strong> Amazon Web Services (AWS) Athena Sorgu Federasyonu<\/li>\n<li><strong>Zafiyet T\u00fcr\u00fc:<\/strong> Yanl\u0131\u015f Yetki Atamas\u0131<\/li>\n<li><strong>Etkilenen Yaz\u0131l\u0131m S\u00fcr\u00fcmleri:<\/strong> <strong>v2026.17.1<\/strong> \u00f6ncesi ba\u011flay\u0131c\u0131 da\u011f\u0131t\u0131mlar\u0131<\/li>\n<li><strong>\u0130lgili CVE:<\/strong> CVE-2026-75910<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Risk_Giderme_ve_Gerekli_Eylem\"><\/span>Risk Giderme ve Gerekli Eylem<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Athena Federated Query ClickHouse ba\u011flay\u0131c\u0131s\u0131n\u0131 kullanan bulut y\u00f6neticileri ve veritaban\u0131 m\u00fchendisleri, mevcut da\u011f\u0131t\u0131m s\u00fcr\u00fcmlerini derhal incelemelidir. <strong>v2026.17.1<\/strong> s\u00fcr\u00fcm\u00fcnden eski s\u00fcr\u00fcmler kusuru bar\u0131nd\u0131rd\u0131\u011f\u0131ndan, yetkisiz s\u0131r aktar\u0131m vekt\u00f6rlerini ortadan kald\u0131rmak i\u00e7in yamal\u0131 s\u00fcr\u00fcme y\u00fckseltme yapmak esast\u0131r. Kurulu\u015flar, ad\u0131m ad\u0131m g\u00fcncelleme talimatlar\u0131 i\u00e7in resmi AWS g\u00fcvenlik b\u00fcltenlerine ba\u015fvurmal\u0131d\u0131r.<\/p>\n<p><em>Kaynak: <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/rss\/2026-084-aws\/\" target=\"_blank\" rel=\"noopener noreferrer\">Orijinal Makale<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AWS, Athena ClickHouse ba\u011flay\u0131c\u0131s\u0131ndaki yetki atama hatas\u0131n\u0131 ele alan CVE-2026-75910 i\u00e7in bir g\u00fcvenlik b\u00fclteni yay\u0131nlad\u0131.<\/p>\n","protected":false},"author":1,"featured_media":878,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"googlesitekit_rrm_CAowrrDMDA:productID":"","tayfnews_source_url":"","footnotes":"","rank_math_focus_keyword":"AWS, G\u00fcvenlik B\u00fclteni, ClickHouse Ba\u011flay\u0131c\u0131s\u0131, G\u00fcvenlik A\u00e7\u0131\u011f\u0131, Athena, Ba\u011flay\u0131c\u0131","rank_math_title":"AWS G\u00fcvenlik A\u00e7\u0131\u011f\u0131: Athena ClickHouse Ba\u011flay\u0131c\u0131s\u0131 Hatas\u0131","rank_math_description":"AWS, Athena ClickHouse ba\u011flay\u0131c\u0131s\u0131ndaki yetki atama hatas\u0131n\u0131 ele alan CVE-2026-75910 i\u00e7in bir g\u00fcvenlik b\u00fclteni yay\u0131nlad\u0131."},"categories":[2],"tags":[],"class_list":["post-879","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/comments?post=879"}],"version-history":[{"count":0,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/879\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media\/878"}],"wp:attachment":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media?parent=879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/categories?post=879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/tags?post=879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}