漏洞描述
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2010-0219↗knowledge.broadcom.comhttps://knowledge.broadcom.com/external/article/13994/vulnerability-axis2-default-administrato.html↗www.rapid7.comhttp://www.rapid7.com/security-center/advisories/R7-0037.jsp↗www.vupen.comhttp://www.vupen.com/english/advisories/2010/2673↗retrogod.altervista.orghttp://retrogod.altervista.org/9sg_ca_d2d.html↗