Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with file_manager=image and supply arbitrary file paths like src/config.inc.php to retrieve configuration files and sensitive system data.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25582 i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter … https://www.cve.org/CVERecord?id=CVE-2019-25582
Post summary
The text announces CVE-2019-25582 as an arbitrary file‑download flaw in i‑doit CMDB 1.12, enabling authenticated attackers to retrieve sensitive files by manipulating a file parameter.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25582 - i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter Intel Report: https://ift.tt/gOjzFhY
Post summary
A threat alert for CVE-2019-25582, detailing an arbitrary file download flaw in i-doit CMDB 1.12 via the file_manager parameter.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | i-doit | i-doit | 1.12 | - | - |