ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility.
CVSS 4.0CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.01944·Published 2025-08-30·Fixed in 125.10CWE-434
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.01155·Published 2025-08-20·Fixed in 125.10CWE-552
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI.