EfficientIP SOLIDserver IPAM Directory Traversal Vulnerability

A directory traversal vulnerability exists in EfficientIP's SOLIDserver IPAM version 8.2.3. This vulnerability allows authenticated users with administrator privileges to access and list directories beyond their authorized access. By manipulating the 'directory' parameter in the '/mod/ajax.php?action=sections/list/list' endpoint, users can view files outside the 'LOCAL:///' folder.

Impact

Exploitation of this vulnerability could lead to unauthorized directory listing, allowing users to access files and directories they should not have permission to.

Remediation

The vulnerability has been fixed in SOLIDserver IPAM version 8.4.1.