lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials.
References
Link | Resource |
---|---|
https://hackerone.com/reports/16330 | Third Party Advisory |
http://www.s3.eurecom.fr/cve/CVE-2014-3930.txt | Third Party Advisory |
Configurations
Information
Published : 2017-04-03 08:59
Updated : 2017-04-11 08:04
NVD link : CVE-2014-3930
Mitre link : CVE-2014-3930
JSON object : View
CWE
CWE-284
Improper Access Control
Products Affected
lg_project
- lg