An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ provides a directory listing.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://pastebin.com/eA5tGKf0 | third party advisory exploit |
https://www.exploit-db.com/exploits/44910/ | exploit vdb entry third party advisory |