An unauthenticated information disclosure vulnerability in Creacast Creabox Manager 4.4.4 allows remote attackers to retrieve plaintext administrative credentials.

The application exposes an unauthenticated endpoint at /get that returns internal configuration data. This flaw permits any unauthenticated remote attacker to access the creacodec.lua file, which contains sensitive administrative credentials in plaintext.

The compromise of administrative credentials poses a critical risk to the confidentiality and integrity of the entire management platform. With these credentials, an attacker could gain full administrative control over the system, leading to unauthorized access, potential service disruption, and the exfiltration of sensitive configuration data. Given the CVSS score of 7.5, this vulnerability represents a high-severity risk that requires immediate attention to prevent unauthorized system takeover.

Immediate Action: Restrict access to the /get endpoint immediately through firewall rules or reverse proxy configuration to prevent unauthorized requests. Contact the vendor for information regarding a security patch to remediate the underlying exposure.

Proactive Monitoring: Review web server access logs for any requests directed to the /get endpoint, specifically monitoring for anomalous traffic patterns from external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or filter all external traffic attempting to access the /get path on the Creabox Manager instance.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the security researcher's write-up referenced in the CVE record.

The exposure of plaintext credentials via an unauthenticated endpoint constitutes a significant security failure that must be addressed immediately. Organizations should prioritize restricting network access to the affected management interface and coordinate with Creacast to obtain a permanent fix. Failure to mitigate this exposure leaves the environment vulnerable to complete administrative compromise.