CVE:CVE-2022-39058
CNNVD:CNNVD-202210-1175
Changing Information Technology RAVA certificate validation system（全景软体 RAVA凭证验证系统网站）是中国Changing Information Technology公司的一个凭证验证系统。
Changing Information Technology RAVA certificate validation system存在路径遍历漏洞。攻击者利用该漏洞绕过身份验证并访问任意系统文件。
solution:Upgrade changingtec rava_certificate_validation_system to a higher version than 3,and avoid the version 3