JEPaaS vulnerability

What happened

A vulnerability was determined in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is an unknown functionality of the file /je/load. This manipulation of the argument Authorization causes improper authorization. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected versions

JEPaaS: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; 7.2.6; 7.2.7; 7.2.8 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.