CVE-2020-12133

Name of the Vulnerable Software and Affected Versions Apros Evolution versions through 2.8.1 ConsciusMap versions through 2.8.1 Furukawa provisioning systems versions through 2.8.1

Description The issue allows remote code execution due to Java deserialization in javax.faces.ViewState.

Recommendations For Apros Evolution versions through 2.8.1, consider disabling the javax.faces.ViewState Java deserialization until a patch is available. For ConsciusMap versions through 2.8.1, restrict access to the affected systems to minimize the risk of exploitation. For Furukawa provisioning systems versions through 2.8.1, avoid using the vulnerable Java deserialization in javax.faces.ViewState until the issue is resolved.