New Features

Supports Detecting the Remote Code Execution Vulnerability in the Weaver Ecology OA System

Sep 19 2019

Cloud Security Scanner now supports detecting the remote code execution vulnerability in the Weaver Ecology OA system.
Content

Target customers: users who use Weaver Ecology 7.0, 8.0, or 8.1. Features released: by default, Resin is installed in Weaver Ecology and the invoker servlet is enabled. The resin.conf file contains a vulnerability that allows attackers to call the servlet under CLASSPATH to execute commands by accessing the corresponding /weaver/className. We recommend that users scan for this vulnerability as soon as possible.

7th Gen ECS Is Now Available

Increase instance computing power by up to 40% and Fully equipped with TPM chips.
Powered by Third-generation Intel® Xeon® Scalable processors (Ice Lake).

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.