Description
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and read files via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2958.
References
- JVN#16409640 third-party-advisory
- JVNDB-2015-000078 third-party-advisory
- http://jvn.jp/en/jp/JVN16409640/995646/index.html
- 75073 vdb-entry