vendor:
Zixforum
by:
Unknown
5.5
CVSS
MEDIUM
Database disclosure
200
CWE
Product Name: Zixforum
Affected Version From: All versions
Affected Version To: All versions
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Unknown
Zixforum Database Disclosure Vulnerability
Remote users can download the database file 'ZixForum.mdb' and access sensitive information including unencrypted authentication credentials.
Mitigation:
Configure the web server to restrict access to sensitive files.