Description (CNA)
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OPEN, Inc. / BizRobo! | affected all versions |
CWE
CWE-502
References
- https://knowledge.bizrobo.com/hc/ja/articles/39951710517145
- https://knowledge.bizrobo.com/hc/ja/articles/39952052043289
- https://knowledge.bizrobo.com/hc/ja/articles/39953373809305
- https://knowledge.bizrobo.com/hc/ja/articles/360029772271
- https://jvn.jp/en/jp/JVN30641875/
ADP enrichment
No English description supplied.
No references supplied.