CyberRota Analysis
AI-GeneratedZettlab D6 Ultra versions prior to 1.7.0 are vulnerable to directory traversal attacks that allow unauthorized access to sensitive files, specifically /etc/passwd and /etc/shadow, when improperly configured volumes are used in container deployments. This could lead to the exposure of user credentials and system information, potentially compromising the integrity and confidentiality of the system. Organizations utilizing this software should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.