Missing Authentication In IDAttend’s IDWeb Application

Vulnerability

An unauthenticated arbitrary file read vulnerability exists in IDAttend's IDWeb application version 3.1.013. The flaw allows an attacker to retrieve any file present on the web server without authentication [1]. The vulnerability is present in the application's handling of file access requests, which do not enforce proper authentication checks.

Exploitation

An attacker can exploit this vulnerability remotely without any prior authentication or user interaction. By sending a specially crafted HTTP request, likely using path traversal techniques, the attacker can read arbitrary files from the server's file system [1]. No special network position is required beyond network access to the application.

Impact

Successful exploitation allows an unauthenticated attacker to read any file accessible by the web server process. This may include sensitive configuration files, credentials, source code, or other confidential data, potentially leading to further compromise of the system or data breach.

Mitigation

The vulnerability is fixed in IDWeb version 3.1.053 [1]. Users should upgrade to this version or later to remediate the issue. No workarounds are documented in the available reference.