RULE(RULE ID:338641)

Rule General Information
Release Date: 2025-01-07
Rule Name: Landry Multiple Endpoint Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Landray EKP is an online digital OA software developed by Shenzhen Lanling Software Co., LTD. It is designed to provide online office solutions for large and medium-sized enterprises. The software covers the process management, knowledge management, meeting management, document management, task management and supervision functions, aiming to improve the organization's collaboration efficiency and work efficiency. Landray OA multiple endpoints have arbitrary file read vulnerability, which allows attackers to read arbitrary files on the system, resulting in sensitive information leakage.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.