RULE(RULE ID:338397)

Rule General Information
Release Date: 2024-09-03
Rule Name: Apache Axis 1.4 Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Apache Axis is an open source framework for building Web services. It supports SOAP protocol and allows developers to create and call Web services in multiple programming languages. Its version 1.4 has a remote code execution vulnerability, which allows remote attackers to create new services through the/services/AdminService interface, thus causing malicious code execution.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.