CVE-2024-57727

SimpleHelp Path Traversal Vulnerability

Simplehelp

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

16. Jan 2025

Ausgewertete Quellen

• Hinweis
  https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727
• CISA
  SimpleHelp Path Traversal Vulnerability
• NVD
  CVE-2024-57727