Infoblox NIOS Arbitrary File Write Vulnerability in Account Creation Mechanism

A vulnerability exists in Infoblox NIOS versions through 9.0.7, allowing high-privileged users to perform arbitrary file writes during the account creation process. Exploitation of this vulnerability could lead to unauthorized modification or creation of files on the system.

Impact

Exploitation allows authenticated users to write malicious files to specific locations on the system, potentially leading to further exploitation or system compromise.

Remediation

Users can upgrade to Infoblox NIOS version 9.0.8, which includes the fix for this vulnerability. For versions 8.5.2, 8.6.5, and 9.0.1 through 9.0.7, Infoblox provides version-specific hotfixes. Instructions for applying these hotfixes are available in the Infoblox Support Knowledge Base.