'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app: apache_dolphinscheduler_permission_vul（Rule ID：1070210140）

Release Date：2025/9/15

Rule Name：CVE-2020-13922: Apache DolphinScheduler Permission Vulnerability

Severity：mid

CVE ID：CVE-2020-13922

 

Descripiton：

Apache DolphinScheduler is a distributed, decentralized, and easily expandable visual DAG workflow task scheduling system. It is committed to solving the intricate dependencies in the data processing process, so that the scheduling system can be used out of the box in the data processing process. Apache DolphinScheduler 1.2.0, 1.2.1, and 1.3.1 have permission overwrite vulnerabilities. Through api interface, users can overwrite other users' passwords in the DolphinScheduler system. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.