vendor:
by:
BeyazKurt
5.5
CVSS
MEDIUM
Local File Inclusion
22
CWE
Product Name:
Affected Version From:
Affected Version To:
Patch Exists: YES
Related CWE:
CPE:
Platforms Tested:
2007
ACGV Annu (rubrik) Local File Inclusion Exploit
This exploit allows an attacker to include files from the server's file system by manipulating the 'rubrik' parameter in the URL. By using '../' to navigate to directories above the web root, the attacker can access sensitive files such as '/etc/passwd'.
Mitigation:
To mitigate this vulnerability, it is recommended to sanitize user input and validate any file paths used in the application. Additionally, access controls should be implemented to restrict unauthorized access to sensitive files.
