Security Advisory
CVE-2014-2301
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations (op=inf) to an object in pub/bscw.cgi/.