---
id: 4039
title: "CATIE Web - Version 20.04.0"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/catie-web-v-20-04-0-advisory"
published_at: "2021-12-02T00:00:00Z"
tags: ["web-security", "information-disclosure", "vulnerability", "advisory", "local-file-disclosure", "catie-web"]
phying_url: "https://phying.com/item/4039"
lang: en
---

# CATIE Web - Version 20.04.0

## Summary

Four local file disclosure flaws in CATIE Web 20.04.0 let unauthenticated attackers read any host file, including source code and password hashes, as the service ran as root.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-12-02T00:00:00Z
- **Original:** https://bishopfox.com/blog/catie-web-v-20-04-0-advisory
- **Phying News:** https://phying.com/item/4039