Description

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.

Remediation

References

CVE-2023-6554

Related Vulnerabilities

WordPress Plugin Essential Content Types Security Bypass (1.4)

Internet Information Services Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2009-3023)

Liferay DXP Improper Certificate Validation Vulnerability (CVE-2022-42131)

WebLogic CVE-2017-10123 Vulnerability (CVE-2017-10123)

WordPress Plugin St-Daily-Tip Cross-Site Request Forgery (4.7)

Severity

Medium

Classification

CVE-2023-6554 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities