CVE-2024-58386: ZoneMinder 1.37.x Path Traversal via files view
ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to outputfile, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ZoneMinderto a version that resolves this vulnerability.Fixed in 1.38.0
Event History
Frequently Asked Questions
Which users can exploit this issue?
An authenticated user with Events view permission can exploit the vulnerable files view. No user interaction is required.
What can an attacker access?
The issue allows reading arbitrary files through path traversal in the path parameter. Sensitive targets may include configuration files that contain database credentials.
Which deployments are affected?
ZoneMinder versions from 1.37.0 up to, but not including, 1.38.0 are affected. The available data does not state whether Events view permission is granted by default.