RULE(RULE ID:338316)

Rule General Information
Release Date: 2024-08-13
Rule Name: Glodon OA ConfigService.asmx SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Glodon OA is a comprehensive office automation solution , aimed at improving work efficiency and collaboration capabilities within organizations. It provides a series of functions and tools to help enterprises manage and process daily office tasks, processes, and documents, and connects various business systems through the "collaboration+" capability to achieve single sign on, proxy aggregation, function aggregation, as well as data integration and business applications. The ConfigService.asmx of Glodon OA has an SQL injection vulnerability, which allows attackers to insert malicious SQL code into database queries. This can lead to data leakage, data corruption, service interruption, and even complete control of the entire database system, posing a serious threat to enterprise data security.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.