Description
Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=db_backup and ../ sequences in name to read files like /etc/passwd, and a hardcoded systemi account makes authentication effectively trivial. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Penta Security Systems | WAPPLES | 4.0.54.1, 5.0, 6.0 | — |
References
- Researcher Disclosure technical-description exploit
- Nuclei Template technical-description
- Product Webpage product
- VulnCheck Advisory: Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer third-party-advisory