PT-2026-7932 · Bullwark · Bullwark Momentum Series Jaws

Numan Türle · Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25333

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bullwark Momentum Series JAWS version 1.0

Description The software contains a directory traversal issue that permits unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit this by sending specially crafted GET requests containing multiple '../' sequences to read sensitive files, such as /etc/passwd, located outside the web root directory. The API endpoint is susceptible to manipulation through HTTP request paths. The vulnerable parameter is the HTTP request path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-25333

Affected Products

Bullwark Momentum Series Jaws

References · 5

• 🔥 https://exploit-db.com/exploits/47773 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25333 · Security Note
• https://vulncheck.com/advisories/bullwark-momentum-series-jaws-momentum-series-jaws · Note
• https://web.archive.org/web/20190729023518/http://bullwark.net · Note
• https://t.me/CVEtracker/44575 · Telegram Post