An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asycuda_world | Unctad | 2001 (including) | 2020 (including) |