IceWarp 协作目录遍历信息泄露漏洞

攻击者可以利用此漏洞访问 IceWarp 服务器上的敏感文件和目录，例如配置文件、数据库备份或其他包含敏感信息的资源。由于该漏洞无需身份验证即可利用，攻击者可以匿名访问这些资源。潜在影响包括数据泄露、未经授权的访问以及可能的系统破坏。此漏洞的范围取决于 IceWarp 服务器上存储的数据类型和敏感程度，以及服务器在网络中的位置。

Organizations utilizing IceWarp for collaboration and communication are at risk, particularly those running the affected versions (14.2.0.10–14.2.0.10). Shared hosting environments where multiple users share the same IceWarp instance are especially vulnerable, as a compromise of one user's account could potentially lead to the disclosure of data belonging to other users.

• windows / server: Monitor IceWarp server logs for unusual file access attempts or errors related to the collaboration endpoint. Use Sysinternals Process Monitor to observe file system activity and identify suspicious processes accessing sensitive files. • linux / server: Monitor IceWarp server logs for attempts to access files outside of the intended directory structure. Use auditd to track file access events and identify suspicious patterns.

auditctl -w /path/to/sensitive/files -p wa -k icewarp_traversal

• generic web: Monitor web server access logs for requests to the collaboration endpoint with unusual parameters in the 'ticket' field. Use curl to test the endpoint with various input values and observe the response.

curl 'http://icewarp-server/collaboration?ticket=../../../../etc/passwd'

1. 2026-03-13Disclosure

   disclosure

1. 已保留2026-02-13
2. 发布日期2026-03-13
3. 修改日期2026-03-16
4. EPSS 更新日期2026-03-23

目前，官方建议升级到已修复的版本。如果无法立即升级，可以考虑以下缓解措施：限制对协作端点的访问，仅允许授权用户访问；实施严格的文件访问控制，确保敏感文件受到保护；监控 IceWarp 服务器上的异常活动，例如未经授权的文件访问尝试。由于没有提供具体的配置绕过方法，建议严格控制网络访问权限。