Local File Disclosure Vulnerability in rConfig by rConfig
CVE-2021-29006
6.5MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-29006?
The Local File Disclosure issue in rConfig 3.9.6 allows authenticated users to access and download any file from the server. This poses significant risks as sensitive data may be exposed, enabling unauthorized file access. It is crucial for rConfig users to assess their systems and apply the necessary patches to mitigate this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.