Description
Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.
References
- http://www.procheckup.com/security_info/vuln_pr0302.html
- 9985 third-party-advisory
- Hummingbird-docsfusionserver-file-access(13397) vdb-entry
- VU#989580 third-party-advisory