Beveiligingsadvies

CVE-2009-10005

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-20 15:31:57

Laatst bijgewerkt 2026-07-15 01:23:10

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin/ck/mimencode with traversal and output parameters, attackers can read sensitive files such as /etc/passwd outside the webroot.

← Alle CVE's bekijken Bekijk op cve.org ↗