CVE-2024-57784

Vulnerability

The vulnerability is a directory traversal in the /php/script_uploads.php component of Zenitel AlphaWeb XE version 11.2.3.10. The application fails to properly sanitize the file parameter when handling the get_file action, allowing an attacker to traverse directories using ../ sequences [1].

Exploitation

Exploitation requires authentication? The official description does not mention prerequisites, but the reference title indicates it is an authenticated vulnerability. An attacker can send a crafted HTTP GET request to http:///php/script_uploads.php?action=get_file&file=../../../../etc/passwd to read arbitrary files [1].

Impact

Successful exploitation leads to information disclosure, as the attacker can read sensitive files on the server, such as /etc/passwd, potentially revealing user credentials or other confidential data [1].

Mitigation

As of the publication date, no patch has been announced. Administrators should consider restricting access to the vulnerable script, implementing input validation, or applying vendor updates when available [1].