Ilevia EVE X1 Server File Disclosure Vulnerability

A pre-authentication file disclosure vulnerability has been identified in Ilevia EVE X1 Server versions through 4.7.18.0.eden. This vulnerability allows remote attackers to retrieve arbitrary files from the server by exploiting the 'db_log' POST parameter, potentially exposing sensitive system information and credentials.

Impact

Exploitation of this vulnerability leads to unauthorized access to sensitive files on the server, including system information and credentials.

Reproduction

The vulnerability can be reproduced by sending a POST request to 'http://<target>:8080/ajax/php/dbcheck.php' with the 'db_log' parameter set to the path of the file to be disclosed, such as '/etc/passwd'.