Description
Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
References
- 3577 vdb-entry
- apache-strongholdstatus-info-disclosure(51951) vdb-entry
- stronghold-webserver-obtain-information(7582) vdb-entry
- apache-strongholdinfo-info-disclosure(51950) vdb-entry
- 20011123 Redhat Stronghold Secure Server File System Disclosure Vulnerability mailing-list