CVE-2024-6424

An attacker sends an HTTP request to unprotected API endpoints: '/api/Proxy/Post?userName=&password=&uri=' or '/api/Proxy/Get?userName=&password=&uri=', providing as the 'uri' parameter a file path, internal URL, or IP address/hostname. The server fulfills the request on behalf of the attacker, allowing reading of web source code, internal system files, and querying of internal network resources. The lack of authentication mechanism on these endpoints makes the attack available to any remote entity without possessing any credentials.

An attacker can read sensitive files from the server (including web application source code and internal files) and gain access to internal network resources that are not directly accessible from the outside, which may lead to disclosure of sensitive data and further compromise of the infrastructure.

Apply patches available from the vendor according to the references. Additionally, it is recommended to restrict access to API endpoints at the firewall level and enforce authentication on all proxy endpoints.

MESbook version 20221021.03