Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/.
References
Link | Resource |
---|---|
https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-05-07 06:15
Updated : 2020-05-12 12:18
NVD link : CVE-2019-18867
Mitre link : CVE-2019-18867
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
blaauwproducts
- remote_kiln_control