CVE-2023-28725

Name of the Vulnerable Software and Affected Versions General Bytes Crypto Application Server (CAS) versions prior to 20221118.48 General Bytes Crypto Application Server (CAS) versions prior to 20230120.44

Description The issue allows remote attackers to execute arbitrary Java code by uploading a Java application to the "/batm/app/admin/standalone/deployments" directory. This has been exploited in the wild in March 2023.

Recommendations For versions prior to 20221118.48, update to version 20221118.48 or later. For versions prior to 20230120.44, update to version 20230120.44 or later. As a temporary workaround, consider restricting access to the "/batm/app/admin/standalone/deployments" directory until a patch is applied.