Check Point Advisories

WebPageTest Directory Traversal

Vulnerability
Protection

Check Point Reference:	CPAI-2013-414
Date Published:	20 Feb 2013
Severity:	Medium
Last Updated:	Wednesday 24 April, 2024
Source:
Protection Provided by:	Security Gateway R75
Who is Vulnerable?	Webpagetest 2.6
Vulnerability Description	This module exploits a directory traversal vulnerability found in WebPageTest 2.6.
Vulnerability Details	The issue is due to the about.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'cfg' cookie parameter. Due to the way the gettext.php script handles the 'file' parameter, it is possible to read a file outside the www directory.

Protection Overview

This Protection will detect and block malicious requests to the server.

In order for the protection to be activated, update your product to the latest update. For information on how to update , go to SBP-2006-05, Protection tab and select the version of your choice.

Security Gateway R75 / R71 / R70

In the IPS tab, click Protections and find the WebPageTest Directory Traversal protection using the Search tool and Edit the protection's settings.
Install policy on all modules.

SmartView Tracker will log the following entries:
Attack Name: Application Servers Protection Violation
Attack Information: WebPageTest Directory Traversal