Industrial Application Software Canias ERP Improper Authorization Vulnerability in RMI Interface

A vulnerability allowing improper authorization has been identified in Industrial Application Software (IAS) Canias ERP version 8.03. The issue arises in the RMI Interface component, specifically within the iasGetServerInfoEvent function. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for improper authorization, which could lead to unauthorized access or actions within the application.

Reproduction

The vulnerability can be reproduced by sending a request to the RMI registry on port 27499. After looking up the '11000000S2OUT' binding, the 'iasGetServerInfoEvent' can be dispatched. The response will contain server information, demonstrating the improper authorization.