Infoblox NIOS Privilege Escalation Vulnerability Allowing Authenticated Remote Code Execution

A vulnerability in Infoblox NIOS in versions 8.6 prior to 8.6.4 and 9.0 prior to 9.0.4 allows for authenticated remote code execution and unauthorized user-level shell access. This issue arises from executing with more privileges than necessary, and exploitation requires valid admin credentials.

Impact

Exploitation of this vulnerability could lead to authenticated remote code execution and unauthorized access to a user-level shell.

Remediation

Users can upgrade to Infoblox NIOS 8.6.4 hotfix or 9.0.4, both of which contain the fix for this vulnerability. Instructions for applying the hotfix are available in the Infoblox Support Portal.