CVE:CVE-2019-12180
CNNVD:CNNVD-202002-122
SmartBear Software ReadyAPI是美国SmartBear Software公司的一款API测试平台。该平台支持功能测试、负载测试和服务虚拟化等功能。
SmartBear Software ReadyAPI 2.8.2版本至3.0.0版本和SoapUI 5.5及之前版本中的Load Script功能存在输入验证错误漏洞。本地攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade smartbear readyapi to a higher version than 3.0.0,and avoid the version [2.8.2,3.0.0]; Upgrade smartbear soapui to a higher version than 5.5,and avoid the version (,5.5]