USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/38365 | vdb entry |
http://forum.usvn.info/viewtopic.php?f=4&t=320 | |
http://osvdb.org/39862 | vdb entry |
http://www.usvn.info/news/ | patch |
http://www.securityfocus.com/bid/26384 | vdb entry patch |
http://secunia.com/advisories/27521 | third party advisory |