Description

Due to a misconfiguration of a web server, qdPM configuration files are accessible for unauthenticated users

Remediation

Restrict access to configuration files

References

qdPM

Related Vulnerabilities

Misconfigured Access-Control-Allow-Origin Header

WordPress Plugin MAC PHOTO GALLERY 'albid' Parameter Arbitrary File Disclosure (2.8)

Invalid Content Security Policy (CSP) Directive Identified in meta Elements

WordPress Plugin WP Activity Log Information Disclosure (3.1.1)

Java Debug Wire Protocol remote code execution

Severity

High

Classification

CWE-260 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure