Wapples Web Application Firewall - Local File Inclusion
Wapples Web Application Firewall is vulnerable to local file inclusion.
wapples_firewallPoC 已收录
CVSS7.5
暂无产品描述。
共找到 2 条公开漏洞记录
Wapples Web Application Firewall is vulnerable to local file inclusion.
WAPPLES Web Application Firewall through 6.0 contains a hardcoded credentials vulnerability. It contains a hardcoded system account accessible via db/wp.no1, as configured in the /opt/penta/wapples/script/wcc_auto_scaling.py file. An attacker can use this account to access system configuration and confidential information, such as SSL keys, via an HTTPS request to the /webapi/ URI on port 443 or 5001.