CVE-2025-34098

This exploit leverages an authenticated arbitrary file read vulnerability in Riverbed SteelHead VCX by manipulating the log filter parameter to read sensitive files like /etc/passwd. It requires valid credentials and interacts with the target via HTTP requests.

This Metasploit module exploits an authenticated arbitrary file read vulnerability in Riverbed SteelHead VCX by leveraging the log module's filter engine to retrieve file contents. It authenticates via CSRF-protected login and then reads the specified file by manipulating the filterStr parameter.