CVE-2008-6955 mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for....
HighCVSS 7.5
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infireal mxcamarchive | = 2.2 | No fix listed |
References
- 49886 vdb-entry
- 32751 third-party-advisory vendor-advisory
- 32324 vdb-entry
- mxcamarchive-config-information-disclosure(46647) vdb-entry
- 7136 exploit