Weakness (CWE)
CWE-529: Exposure of Access Control List Files to an Unauthorized Control Sphere
Variant Incomplete
The product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.
How to prevent it (1 mitigation)
-
System Configuration
Protect access control list files.
Source: MITRE CWE-529
1 result · Feed
-
High 7.5
Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.