Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE
Vulnerability Description
BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthenticated directory traversal sequences to cause the server to read arbitrary system files accessible to the account running the service. Retrieved configuration artifacts may contain account credentials used for BBj Enterprise Manager; possession of these credentials enables administrative access and use of legitimate management functionality that can result in execution of system commands under the service account. Depending on the operating system and the privileges of the BBj service account, this issue may also allow access to other sensitive files on the host, including operating system or application data, potentially exposing additional confidential information.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
BASIS BBj 安全漏洞
Vulnerability Description
BASIS BBj是美国BASIS公司的一个语言环境。 BASIS BBj 25.00之前版本存在安全漏洞，该漏洞源于未正确验证或规范化输入路径段，可能导致目录遍历攻击。
CVSS Information
N/A
Vulnerability Type
N/A