Security Advisory
CVE-2009-0250
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrators password hash via a direct request for config/password.