CVE-2025-34320
CriticalSummary
BASIS BBj prior to version 25.00 has a Jetty-served web endpoint that fails to validate or canonicalize path segments, allowing unauthenticated directory traversal to read arbitrary system files. This may expose credentials for BBj Enterprise Manager, enabling administrative access and system command execution.
Risk Assessment
An attacker can access sensitive files, including credentials, potentially leading to full system compromise. This may breach data confidentiality and integrity.
Recommendation
Update BASIS BBj to version 25.00 or later. Restrict access to the endpoint and implement path validation.
Original NVD description (English source)
BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthenticated directory traversal sequences to cause the server to read arbitrary system files accessible to the account running the service. Retrieved configuration artifacts may contain account credentials used for BBj Enterprise Manager; possession of these credentials enables administrative access and use of legitimate management functionality that can result in execution of system commands under the service account. Depending on the operating system and the privileges of the BBj service account, this issue may also allow access to other sensitive files on the host, including operating system or application data, potentially exposing additional confidential information.