Infinera G42 SFTP Service OS File System Access Vulnerability

A vulnerability in the SFTP service of Infinera G42 version R6.1.3 allows remote authenticated users to read and write operating system files. This unrestricted access is granted through SFTP connections, using the same credentials as SSH command-line interface access. Users with Network Administrator profile can bypass the chrooted directory restriction and access files according to OS permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of OS files, potentially allowing for further exploitation or disruption of the system.