CVE:CVE-2011-2397
CNNVD:CNNVD-201112-023
Iron Mountain Connected Backup 8.4版本中的代理服务存在漏洞。远程攻击者可以借助特制的操作码13请求触发使用LaunchCompoundFileAnalyzer类向System.getRunTime.exec类函数发送请求数据来执行任意代码。
solution:Upgrade ironmountain connected_backup to a higher version than 8.4,and avoid the version 8.4