Infoblox NetMRI Directory Traversal Vulnerability Allowing Arbitrary File Read with Root Access

A directory traversal vulnerability has been identified in Infoblox NetMRI versions prior to 7.6.1. This vulnerability allows remote authenticated users to read arbitrary files with root access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the system, potentially including files with root privileges.

Remediation

Users can upgrade to Infoblox NetMRI version 7.6.1 or later. For versions 7.5.3, 7.5.4, and 7.6.0, a hotfix is available on the autoupdate server. This hotfix can be applied using the 'au' command. For any additional queries, customers can contact Infoblox Support.