Beveiligingsadvies

CVE-2007-4093

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-07-30 20:00:00
Laatst bijgewerkt 2024-08-07 14:46:37
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing usernames and encrypted passwords via a direct request for db/users.db.