Path Traversal in Efficientip Solidserver Ip Address Management
CVE-2025-13879
Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.005 (38.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Efficientip Solidserver_ip_address_management — versions 8.2.3
- Solidserver Ipam — versions 8.2.3
Weakness classification (CWE)
References
- cve-coordination@incibe.es (Third Party Advisory)
- cve-coordination@incibe.es (release-notes, Product, patch)
Frequently asked questions
- What is CVE-2025-13879?
- CVE-2025-13879 is a low-severity vulnerability in Efficientip Solidserver Ip Address Management, classified under Path Traversal. CVSS score: 2.7/10. Published 2025-12-02.
- How severe is CVE-2025-13879?
- Low severity. CVSS v3 base score is 2.7 out of 10.