CVE:CVE-2020-13883
CNNVD:CNNVD-202006-577
WSO2 API Manager等都是美国WSO2公司的产品。WSO2 API Manager是一套API生命周期管理解决方案。WSO2 API Microgateway是一款云原生、可扩展的API网关产品。WSO2 IS as Key Manager是一款密钥管理器。
WSO2 API Manager 3.0.0及之前版本、WSO2 API Microgateway 2.2.0版本和WSO2 IS as Key Manager 5.9.0及之前版本中的Management Console存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade wso2 api_manager to a higher version than 3.0.0,and avoid the version (,3.0.0]; Upgrade wso2 api_microgateway to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade wso2 identity_server_as_key_manager to a higher version than 5.9.0,and avoid the version (,5.9.0]