Beveiligingsadvies

CVE-2000-1100

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2000-12-19 05:00:00
Laatst bijgewerkt 2024-08-08 05:45:37
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.