Description
Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and configuration files) via direct request for certain files in (1) /runTime/ or (2) /remediationReports/.
References
- 2698 third-party-advisory
- 20070502 Bradford CampusManager v3.1(6) Sensitive Data Disclosure mailing-list
- 35820 vdb-entry
- campusmanager-directory-info-disclosure(34042) vdb-entry
- http://www.john-martinelli.com/work/campusmanager.txt
- 25138 third-party-advisory