Live › vulnerability › CVE-2024-58396
Go to dashboardThe CPAS Audit Management System V4 has a path traversal flaw in its plugin download endpoint, where the fileId parameter accepts ../ sequences. An unauthenticated attacker can send a GET request to /cpasm4/plugInManController/downPlugs and read arbitrary system files such as /etc/passwd.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| CPAS Audit Management System | vendor | V4 (no finer range published) | – |
Check whether a CPAS Audit Management System V4 instance is deployed, then request /cpasm4/plugInManController/downPlugs with fileId set to ../../../../etc/passwd and look for passwd contents in the response.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with ../ sequences in fileId to retrieve system files like /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-01-13.
This page as .md · .json · in your agent: get_signal("CVE-2024-58396")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.