PT-2020-20743
CVE-2020-9761
·
تاريخ النشر
2020-03-04
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
UNCTAD ASYCUDA World versions 2001 through 2020
Description
The Java RMI Server in UNCTAD ASYCUDA World has an insecure default configuration. This leads to Java code execution from a remote URL because an RMI Distributed Garbage Collector method is called.
Recommendations
For versions 2001 through 2020, consider reconfiguring the Java RMI Server to secure its default settings, focusing on proper configuration of the RMI Distributed Garbage Collector method to prevent remote code execution. As a temporary workaround, restrict access to the Java RMI Server until a secure configuration can be implemented.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾