PT-2020-12643 · Zen · Zen Load Balancer

Code16 · Published 2020-04-02 · Updated 2020-04-03 · CVE-2020-11491

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zen Load Balancer version 3.10.1

Description The issue allows remote authenticated administrators to conduct absolute path traversal attacks. This can be demonstrated by sending a request to the "index.cgi" endpoint with a filelog parameter set to /etc/shadow, allowing access to sensitive files.

Recommendations For Zen Load Balancer version 3.10.1, consider restricting access to the index.cgi endpoint or limiting the filelog parameter to prevent path traversal attacks until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-11491

Affected Products

Zen Load Balancer

References · 4

• 🔥 https://github.com/c610/tmp/blob/master/zenload4patreons.zip · Exploit
• 🔥 http://code610.blogspot.com/2020/03/pentesting-zen-load-balancer-quick.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-11491 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11491 · Security Note