WSO2 Multiple Products File Upload Remote Command Execution (CVE-2022-29464)

2022-04-2600:00:00

www.tenable.com

280

The remote web server is running a WSO2 product that is affected by a file upload remote command execution vulnerability due to improper validation of user input. A remote, unauthenticated attacker can leverage this by uploading a malicious jsp script to the web server resulting in remote command execution.

Note that Nessus tests for this vulnerability by sending a benign POST request to the vulnerable endpoint and analyzes the response to determine if the vulnerability is present or has been patched or mitigated.

Binary data wso2_CVE-2022-29464.nbin

VendorProductVersionCPE
wso2api_managercpe:/a:wso2:api_manager
wso2enterprise_integratorcpe:/a:wso2:enterprise_integrator
wso2identity_servercpe:/a:wso2:identity_server
wso2identity_server_analyticscpe:/a:wso2:identity_server_analytics
wso2identity_server_as_key_managercpe:/a:wso2:identity_server_as_key_manager

Vendor	Product	CPE
wso2	api_manager	cpe:/a:wso2:api_manager
wso2	enterprise_integrator	cpe:/a:wso2:enterprise_integrator
wso2	identity_server	cpe:/a:wso2:identity_server
wso2	identity_server_analytics	cpe:/a:wso2:identity_server_analytics
wso2	identity_server_as_key_manager	cpe:/a:wso2:identity_server_as_key_manager