A critical information disclosure vulnerability in ASTPP 4.0.1 allows unauthenticated attackers to exfiltrate database backups through predictable filename patterns.

This vulnerability is an information disclosure flaw (CWE-538) where the software generates database backup files with predictable naming conventions in a publicly accessible directory. An unauthenticated attacker can use fuzzing techniques to guess the filename and download the full database dump.

The successful exploitation of this vulnerability leads to the complete compromise of the database, which contains sensitive billing, user, and configuration information. Given the CVSS score of 7.5, this high-severity flaw poses a severe risk of data exfiltration and potential identity theft, potentially leading to significant reputational damage and regulatory non-compliance for organizations using this platform.

Immediate Action: Upgrade to a patched version of ASTPP if available or restrict access to the /database_backup/ directory via server-level configuration to prevent unauthorized downloads.

Proactive Monitoring: Review web server access logs for repeated requests to the /database_backup/ directory, particularly those originating from unknown or suspicious IP addresses that follow a fuzzing pattern.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block direct access to files within the /database_backup/ directory for all users, requiring authentication or specific administrative access.

Public Exploit Available: Yes, a functional proof-of-concept exists and is documented in the Exploit-DB entry 47900.

Given the availability of a public proof-of-concept and the high risk of sensitive data exposure, organizations must treat this vulnerability with high priority. Administrators should immediately restrict access to the affected directory via web server configurations to mitigate the risk of unauthorized exfiltration while evaluating the feasibility of upgrading the software to a secure version.