Tikit eMarketing Directory Traversal Vulnerability Allowing Arbitrary File Read

A directory traversal vulnerability leading to local file inclusion has been identified in Tikit (now Advanced) eMarketing platform version 6.8.3.0. This vulnerability allows remote attackers to read arbitrary files and access sensitive information by sending a crafted payload in the filename parameter to the OpenLogFile endpoint.

Impact

Exploitation of this vulnerability allows for arbitrary file read, which could lead to exposure of sensitive information such as database credentials.

Reproduction

The vulnerability can be reproduced by sending an HTTP GET request to the OpenLogFile endpoint with a crafted filename parameter that traverses directories. For example, to read the hosts file on a vulnerable Windows system, the filename parameter can be set to include the path to the hosts file.

Remediation

Users are advised to update to the latest version of the eMarketing platform.