Campusmanager Network Control Application Server CVE-2007-2629 Information Disclosure Vulnerability

Campusmanager Network Control Application Server CVE-2007-2629 Information Disclosure Vulnerability

Campusmanager Network Control Application Server is prone to a information disclosure vulnerability. Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and configuration files) via direct request for certain files in (1) /runTime/ or (2) /remediationReports/.