Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves (via encryption and signing of the message) can be bypassed by changing the Content-Type of the message to text/plain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cleo LexiCom 安全漏洞
Vulnerability Description
Cleo LexiCom是Cleo公司的一个集成平台。加速EDI自动化、加快贸易合作伙伴的加入并轻松解决EDI问题。 Cleo LexiCom 5.5.0.0存在安全漏洞，攻击者可以利用该漏洞通过将消息的Content-Type更改为纯文本，绕过AS2消息发送方标识自己(通过消息加密和签名)的要求。
CVSS Information
N/A
Vulnerability Type
N/A