Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user Mar 22 2007 09:56AM
yearsilent yahoo com
"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. "

a authorized user to the "firewall analyzer" can access any common file on the system, it is should not be allowded

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus