Authentication flaw

2022-12-2123:15:00

PRIOn knowledge base

www.prio-n.com

dataprobe iboot-pdu

authentication

vulnerability

unauthenticated users

php index pages

history file

nvd

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.

CPENameOperatorVersion
iboot-pdu4-n20_firmwarelt1.42.06162022
iboot-pdu4a-n15_firmwarelt1.42.06162022
iboot-pdu4a-n20_firmwarelt1.42.06162022
iboot-pdu4sa-n15_firmwarelt1.42.06162022
iboot-pdu4sa-n20_firmwarelt1.42.06162022
iboot-pdu8a-2n15_firmwarelt1.42.06162022
iboot-pdu8a-2n20_firmwarelt1.42.06162022
iboot-pdu8a-n15_firmwarelt1.42.06162022
iboot-pdu8a-n20_firmwarelt1.42.06162022
iboot-pdu8sa-2n15_firmwarelt1.42.06162022

Name	Operator	Version
iboot-pdu4-n20_firmware	lt	1.42.06162022
iboot-pdu4a-n15_firmware	lt	1.42.06162022
iboot-pdu4a-n20_firmware	lt	1.42.06162022
iboot-pdu4sa-n15_firmware	lt	1.42.06162022
iboot-pdu4sa-n20_firmware	lt	1.42.06162022
iboot-pdu8a-2n15_firmware	lt	1.42.06162022
iboot-pdu8a-2n20_firmware	lt	1.42.06162022
iboot-pdu8a-n15_firmware	lt	1.42.06162022
iboot-pdu8a-n20_firmware	lt	1.42.06162022
iboot-pdu8sa-2n15_firmware	lt	1.42.06162022