CVE-2009-10005 describes a critical arbitrary file read vulnerability in ContentKeeper Web Appliance versions prior to 125.10. Unauthenticated attackers can exploit a CGI endpoint exposing the mimencode binary to retrieve sensitive files from the filesystem, including those outside the webroot like /etc/passwd. With a CVSS score of 8.7 (HIGH) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its network-based attack vector and low complexity. While not on the KEV catalog, a Metasploit module exists, and community discussion is notably high, suggesting active interest and potential for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| ContentKeeper Technologies | Web Appliance | >= 0, < 125.10CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.