CVE:CVE-2017-13696
CNNVD:CNNVD-201708-1122
Dup Scout Enterprise是一款文件清除工具。Disk Savvy Enterprise是一款硬盘空间分析工具。Sync Breeze Enterprise是一款文件同步工具。Disk Pulse Enterprise是一款磁盘检测工具。
多款产品中的Web服务器组件存在安全漏洞，该漏洞源于程序没有正确的处理和过滤请求。攻击者可通过构建恶意的GET请求利用该漏洞获取系统的NT AUTHORITY/SYSTEM级别的访问权限。以下产品和版本受到影响：Dup Scout Enterprise 9.9.14版本；Disk Savvy Enterprise 9.9.14版本；Sync Breeze Enterprise 9.9.16版本；Disk Pulse Enterprise 9.9.16版本。
solution:Upgrade flexense dupscout to a higher version than 9.9.14,and avoid the version 9.9.14; Upgrade flexense disksavvy to a higher version than 9.9.14,and avoid the version 9.9.14; Upgrade flexense syncbreeze to a higher version than 9.9.16,and avoid the version 9.9.16; Upgrade flexense diskpulse to a higher version than 9.9.16,and avoid the version 9.9.16