Description
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
References
- 20021025 Sec-Tec advisory 24.10.02 Unauthorised file acces in Acuma mailing-list
- 6048 vdb-entry
- acusend-unauthorized-file-access(10473) vdb-entry