Researcher discloses zero-day vulnerability in FireEye (csoonline.com)

Here's the exploit posting that they refer to in the first paragraph: https://www.exploit-db.com/exploits/38090/

    ...&name=../../../../../../../../../../../etc/passwd...

One reason these vulnerabilities are so common is that the admin interfaces of appliances like FireEye's aren't normally exposed on the Internet.

A cyber security company that does this

"the box has Apache, pushing PHP, running as root."

is not a cyber security company .. lol