Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Backup Exec系统还原管理器FileUpload类 任意代码执行漏洞
Vulnerability Description
Symantec Backup Exec是美国赛门铁克（Symantec）公司的一套业务备份解决方案。该解决方案为虚拟和物理环境提供数据保护和系统恢复功能。 Symantec Backup Exec系统还原管理器的运行在Symantec LiveState Apache Tomcat服务器(TCP 8080端口)上的FileUpload类存在安全漏洞。如果远程攻击者向该服务器提交了恶意的HTTP POST请求的话，就可以向公开可访问的WEB目录上传JSP脚本，导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A