mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-26 12:20:24 +01:00
770 B
770 B
CVE-2016-1594
Description
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.
POC
Reference
Github
No PoCs found on GitHub currently.