CVE-2023-2766 — AI Deep Analysis Summary

🚨 **Essence**: Weaver E-Office 9.5 has a critical flaw allowing unauthorized access. 📉 **Consequences**: Attackers can read sensitive files or directories, leading to potential data leaks and system compromise.

🛡️ **Root Cause**: CWE-552 (Files or Directories Accessible to Unauthorized Actors). The flaw lies in the processing of `/building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini`, exposing internal configurations.

🏢 **Affected**: Weaver (Weaver E-Office). 📦 **Version**: Specifically **9.5**. This is a major Chinese collaborative office software widely used in enterprises.

💀 **Attacker Capabilities**: Remote access to restricted files/directories.…

⚡ **Threshold**: LOW. 🌐 **Network**: Remote (AV:N). 🔑 **Auth**: None required (PR:N). 🖱️ **UI**: None required (UI:N). Easy to exploit remotely without login.

🔓 **Exploit Status**: YES. Public PoC exists on GitHub (ProjectDiscovery Nuclei templates). Wild exploitation is possible using automated scanning tools.

🔍 **Self-Check**: Scan for the specific path: `/building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini`. Use Nuclei templates or manual HTTP requests to check for 200 OK responses.

🩹 **Fix**: Update to the latest patched version provided by Weaver. 📅 **Published**: May 17, 2023. Official vendor patches are the primary mitigation.

🚧 **No Patch?**: Block external access to the `/building/backmgr/` directory via WAF or firewall rules. 🔒 Restrict access to `jx2_config.ini` specifically. Isolate the OA system.

🔥 **Urgency**: HIGH. ⚠️ **Priority**: Immediate action required. Remote, unauthenticated, and public PoC exist. Protect sensitive config files to prevent further attacks.