CVE-2022-37027

概要

参考情報

• wiki.ahsay.com/doku.php · Release Notes
• ahsay.com/jsp/en/downloads/ahsay-downloads_latest-software_ahsaycbs.jsp · Product
• ahsay.com/partners/en/home/index.jsp · Permissions Required
• compass-security.com/en/research/advisories · Third Party Advisory
• compass-security.com/fileadmin/Research/Advisories/2022_12_CSNC-2022-009_AhsayCBS_Java_Runtime_Parameter_Injection.txt · Exploit

cloud backup suite のその他の脆弱性

• CVE-2026-105134緊急 10.0悪用確認済み（CISA KEV）A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateR…
• CVE-2026-105133高 7.3悪用確認済み（CISA KEV）A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/ap…
• CVE-2020-5846高 8.8An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" reque…
• CVE-2019-10267高 8.8An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into a…
• CVE-2019-10266高 7.5An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to …