ZeroBox Vulnerability Database

影响系统
Fujitsu INTERSTAGE Studio Standard-J Edition 9.0
Fujitsu INTERSTAGE Studio Standard-J Edition 8.0.1
Fujitsu INTERSTAGE Studio Enterprise Edition 9.0
Fujitsu INTERSTAGE Studio Enterprise Edition 8.0.1
Fujitsu INTERSTAGE Job Workload Server 8.1
Fujitsu Interstage Business Application Server Enterprise Edition 8.0
Fujitsu INTERSTAGE Apworks Modelers-J Edition 7.0
Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0
Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.2
Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0
Fujitsu INTERSTAGE Application Server Plus Developer 7.0
Fujitsu Interstage Application Server Plus 7.0.1
Fujitsu Interstage Application Server Plus 7.0
Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 A
Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0
Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.2
Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.1
Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0
Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1
Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0
 
不受影响系统
 
危害
远程攻击者可以利用漏洞获得文件和目录信息。
 
攻击所需条件
攻击者必须访问Fujitsu Interstage产品。
 
漏洞信息
多个Fujitsu Interstage产品存在安全漏洞，允许恶意用户获得敏感信息。
配置和运行了J2EE应用程序的Interstage服务器存在漏洞，允许攻击者未授权访问文件和目录。
 
测试方法
 
厂商解决方案
用户可参考如下供应商提供的安全公告获得补丁信息：
http://www.fujitsu.com/global/support/software/security/products-f/interstage-201005e.html
 
漏洞提供者
Fujitsu