Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to o…

Published Aug 19, 2008 · Updated Aug 7, 2024 · Assigned by mitre