Solidserver Ip Address Management
Monthly
Directory traversal in EfficientIP SOLIDserver IPAM v8.2.3 allows an authenticated administrator to enumerate filesystem directories beyond the authorized 'LOCAL:///' boundary by supplying arbitrary values (e.g., '/') to the 'directory' parameter in the '/mod/ajax.php?action=sections/list/list' endpoint. Exploitation is gated behind administrator credentials, substantially limiting the attacker pool and real-world impact to information disclosure of directory listings. No public exploit code has been identified and EPSS sits at 0.08% (23rd percentile), consistent with the high-privilege requirement.
Directory traversal in EfficientIP SOLIDserver IPAM v8.2.3 allows an authenticated administrator to enumerate filesystem directories beyond the authorized 'LOCAL:///' boundary by supplying arbitrary values (e.g., '/') to the 'directory' parameter in the '/mod/ajax.php?action=sections/list/list' endpoint. Exploitation is gated behind administrator credentials, substantially limiting the attacker pool and real-world impact to information disclosure of directory listings. No public exploit code has been identified and EPSS sits at 0.08% (23rd percentile), consistent with the high-privilege requirement.