RaonWiz Inc. product security update advisory

Overview

 

We have released a security update to fix vulnerabilities in RaonWiz Inc. products. Users of affected products are advised to update to the latest version.
 

Affected Products

 

RAON K Upload 2018 (Server Library) version (JAVA) : 2018.1548512.1555.44 or earlier
RAON K Upload 2018 (Server Library) version (Microsoft .Net) : 2018.1548512.1555.29 or earlier

 

Resolved Vulnerabilities

 

File upload, directory listing, file download, and script execution vulnerabilities due to lack of parameter value validation when processing RAON K Upload 2018 server library

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

RAON K Upload 2018 (Server Library) version (JAVA): 2018.1548512.1555.45 or later
RAON K Upload 2018 (Server Library) version (Microsoft .Net) : 2018.1548512.1555.30 or later

 

References

[1] Release Notes
https://www.raonk.com/page/customs/releaseNotes_modify.aspx?pSeq=60&pageno=1