This vulnerability in Riverbed SteelHead VCX 9.6.0a arises from improper input validation in the log filtering feature exposed through the management web interface. Specifically, the log_filter endpoint's filterStr parameter accepts crafted input that the backend parser processes with file expansion syntax, enabling path traversal and unauthorized access to arbitrary system files. The CVSS 4.0 score of 7.1 reflects its network attack vector, low complexity, and high impact on confidentiality. The issue is categorized under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

An authenticated attacker with low privileges can exploit this vulnerability to access arbitrary system files on the affected SteelHead VCX appliance. This exposure of sensitive information could lead to further compromise or leakage of confidential data. There are no reports of active exploitation in the wild. The vulnerability affects confidentiality but does not impact integrity or availability directly.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict management interface access to trusted administrators only and monitor for suspicious activity. Avoid exposing the management web interface to untrusted networks. Follow Riverbed Technology's advisories for updates on patches or mitigations.