Infoblox NetMRI Authentication Bypass Vulnerability via Hardcoded Credentials

An authentication bypass vulnerability has been identified in Infoblox NetMRI versions prior to 7.6.1. This issue arises from hardcoded credentials in the Process Manager, which can be exploited by an attacker with knowledge of the affected API endpoints.

Impact

Exploitation of this vulnerability allows for authentication bypass, potentially leading to unauthorized access or actions within the application.

Remediation

Users can apply the hotfix available on the Infoblox autoupdate server for NetMRI versions 7.5.3, 7.5.4, and 7.6.0. This hotfix can be installed using the 'au' command. Alternatively, customers can upgrade to NetMRI version 7.6.1 or later, where this vulnerability is addressed. For any additional queries, please contact Infoblox Support.