← back
CVE-2014-10079

CVE-2014-10079

EPSS 8.7%
In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46549/unverifiedexploitdbwww.exploit-db.com/exploits/46549unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://cxsecurity.com/issue/WLB-2018120091https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.htmlhttps://seclists.org/fulldisclosure/2014/Aug/8https://www.exploit-db.com/exploits/46549/