CVE-2020-37278

Summary

Weaver e-Bridge suffers from an unauthenticated arbitrary file read vulnerability that allows remote attackers to access sensitive files on the host system and potentially perform server-side request forgery against internal resources.

Exploitability

The vulnerability is easily exploitable with no authentication required, simply by sending a file: URL to the saveYZJFile endpoint, making it highly attractive for automated attacks.

Blast radius

The impact could be significant as attackers can read system files like /etc/passwd and configuration files containing credentials, potentially leading to further compromise of internal systems through SSRF.

Detection

Monitor network traffic for requests to the saveYZJFile endpoint with file: URLs in the downloadUrl parameter, and look for unusual file access patterns in system logs.

Prioritized remediation

Upgrade to version 2.590 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.