CVE-2025-13879

Directory traversal vulnerability in EfficientIP's SOLIDserver IPAM

CVSS 5.1 MEDIUMEPSS 0.5%CWE-22

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

02 dic 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Productos afectados

SOLIDserver · SOLIDserver IPAM

Referencias

https://efficientip.com/resources/solidserver-ipam-solutions-3/https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-efficientips-solidserver-ipam