RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/519395/100/0/threaded | mailing list |
http://securityreason.com/securityalert/8350 | third party advisory |
http://www.securitytracker.com/id?1025979 | vdb entry |