RULE(RULE ID:338235)

Rule General Information
Release Date: 2024-07-09
Rule Name: Jinher OA C6 DownLoadBgImage Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: The Jinher OA C6 platform is an enterprise management software launched by Kimo Software Company, integrating a variety of office automation functions. It aims to enhance the office efficiency and management level of enterprises by providing comprehensive information technology solutions. There is an arbitrary file reading vulnerability in its DownloadBgImage, which can be exploited by attackers to read arbitrary files, leading to the leakage of sensitive data and even further attacks.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.