Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Mollensoft Enceladus Server Suite HTACCESS File Access Weakness

It has been reported that Enceladus Server Suite does not securely store certain user credentials. This may allow users, who are authorized to access the "Security File Downloads" directory, to gain access to potentially sensitive information. Specifically, the directory htaccess file is stored without access restrictions, making it accessible to users who can access the directory.







 

Privacy Statement
Copyright 2009, SecurityFocus