RULE(RULE ID:338258)

Rule General Information
Release Date: 2024-07-16
Rule Name: Yonyou U9 GetConnectionString Infomation Disclosure Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U9 is a comprehensive integrated enterprise resource planning software launched by Yonyou Network Technology Co., Ltd. for medium and large enterprises, providing information solutions for core business processes such as financial management, supply chain management, production and manufacturing, and human resources. There is an information leakage vulnerability in UFIDA U9 ∝connectionString, which allows attackers to obtain database connection information, including sensitive information such as database account passwords.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.