Ankerui Prepaid Cloud Platform Information Leakage Vulnerability

Ankerui Electric Power Prepaid Cloud Platform Information Leakage Vulnerability Summary 1. Vulnerability Overview Vulnerability Title: Ankerui Electric Power Prepaid Cloud Platform Information Leakage Vulnerability (安凯瑞电力预付费云平台信息泄露漏洞) Vulnerability ID: 3223892355 Vulnerability Type: Information leakage / Sensitive data leakage Severity: High (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vendor: Ankerui Electric Co., Ltd. (安凯瑞电气有限公司) Affected Product: Prepaid Cloud Platform (预付费云平台) Affected Versions: All versions containing publicly accessible backup files 2. Scope of Impact and Exploitation Method Vulnerability Description: The platform contains an unauthenticated information leakage vulnerability. Attackers can directly download exposed source code backup files from the web root directory without authentication. The leaked information includes internal network server IP addresses, database connection credentials (username and password), and other core system configuration parameters. This allows attackers to directly connect to the backend business database, read/modify/delete critical user data (such as payment records), and subsequently launch intranet penetration or lateral movement attacks, severely compromising user data security and platform business continuity. Exploitation Steps (PoC): 1. Attackers download the exposed source code backup file from the following location: 2. Extract the archive to obtain the complete source code and configuration files. 3. Extract the file. 4. View the plaintext sensitive configuration data (internal IP, database address, username/password). Key Information from Evidence Screenshots: File List: The extracted files include core configuration files such as . Sensitive Configuration Leakage: The file stores database connection strings in plaintext. (Note: Specific password values depend on the actual environment, but the screenshot shows them in plaintext) Impact Analysis: Data Breach: Unauthorized access to user payment records, account information, and other sensitive business data. Database Compromise: Direct access to the backend database allows for complete read/write/delete operations on critical business data. Intranet Exposed: Exposed internal network IPs and credentials provide a foothold for further attacks against internal network infrastructure. Business Interruption: Tampering with or deleting core data can lead to service interruptions and financial losses for users and suppliers. 3. Remediation Plan Immediate Actions (Take action now): 1. Delete all exposed backup files (e.g., , , , etc.) from the web root directory. 2. Rotate all affected database credentials. 3. Restrict database access to allow connections only from trusted IP ranges. Long-term Fix Recommendations**: 1. Implement strict access control rules to prevent public access to backup and configuration files. 2. Encrypt or obfuscate sensitive configuration data (e.g., using environment variables or secure configuration libraries). 3. Conduct regular security audits to identify and remove exposed sensitive files. 4. Establish secure deployment practices to avoid leaving backup files in production web directories.

Goal Reached Thanks to every supporter — we hit 100%!

Ankerui Prepaid Cloud Platform Information Leakage Vulnerability

More from this source