PT-2026-7932 · Bullwark · Bullwark Momentum Series Jaws

Numan Türle · Publicado 2026-02-12 · Atualizado 2026-02-12 · CVE-2019-25333

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bullwark Momentum Series JAWS version 1.0

Description The software contains a directory traversal issue that permits unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit this by sending specially crafted GET requests containing multiple '../' sequences to read sensitive files, such as /etc/passwd, located outside the web root directory. The API endpoint is susceptible to manipulation through HTTP request paths. The vulnerable parameter is the HTTP request path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-25333

Produtos afetados

Bullwark Momentum Series Jaws

Referências · 5

• 🔥 https://exploit-db.com/exploits/47773 · Exploit
• https://vulncheck.com/advisories/bullwark-momentum-series-jaws-momentum-series-jaws · Nota
• https://web.archive.org/web/20190729023518/http://bullwark.net · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25333 · Nota de Segurança
• https://t.me/CVEtracker/44575 · Publicação no Telegram