RULE(RULE ID:338066)

Rule General Information
Release Date: 2024-06-04
Rule Name: Kingdee Apusic Application Server loadTree JNDI Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Kingdee Apusic Application Server (AAS) is a standard, secure, efficient, integrated and featured-rich enterprise application server software that fully supports JAKARtaee 8/9 technical specifications. Provide Web containers, EJB containers and WebService containers that meet the specification, support the latest technical specifications such as Websocket1.1, Servlet4.0, HTTP2.0, etc., and provide key support for the convenient development, flexible deployment, reliable operation, efficient management and control, and fast integration of enterprise-class applications. The loadTree interface has a JNDI injection vulnerability.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.