You are a security analyst performing a penetration tests for a company in the Midwest. After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company. You type in the following URL that includes the IP address of one of the routers: http://172.168.4.131/level/99/exec/show/config After typing in this URL, you are presented with the entire configuration file for that router. What have you discovered?

Question

Quizplus · Accepted Answer

The URL provides direct access to the router's configuration file, indicating an HTTP Configuration Arbitrary Administrative Access Vulnerability, where sensitive information is exposed through an unsecured HTTP interface.

You Are a Security Analyst Performing a Penetration Tests for a Company