CVE-2016-1776

Publication date

2016-03-24 01:00:00

Family

apple

State

PUBLISHED

Description

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request.