LiteSpeed Web Server is prone to a vulnerability that lets attackers access source code files. An attacker can exploit this vulnerability to retrieve certain files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks. LiteSpeed Web Server versions prior to 4.0.15 are affected.

Updates are available. Please see the references for more information.

• http://www.litespeedtech.com
• https://www.securityfocus.com/bid/40815

---

Updated on 2017-03-28