cimentech (resolving with update)

[RayTdC]

This solution refers to which of the apps?

A6 - Cimentech

What did you do to mitigate the vulnerability?

The application contained an outdated Drupal (content management system), which allowed remote code execution. After upgrading Drupal from 7.57 to 7.100, remote code execution was no longer possible, as shown in the images below.

before update

after update