As cited
Copy frozen at (site build).
vulnerabilities
Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)
Rapid7 discovered three critical vulnerabilities in Eptura Archibus, a facility management platform used by over 40 percent of Fortune 500 companies. A legacy Java Direct Web Remoting (DWR) application programming interface (API) endpoint allows unauthenticated attackers to bypass authentication and execute arbitrary workflow rules, enabling full database read access and remote code execution through insecure file uploads. Eptura released fixes in version 2025.02, moving the vulnerable DWR method to a REST API.
Why it matters: Organizations running Archibus versions prior to 2025.02 face immediate risk of unauthorized access to user credentials, database records, and system compromise as NT AUTHORITY/Local Service; network-accessible installations require urgent patching.
- Source published
- First seen by Cybersecurity Tracker