CVE-2019-1010308

Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file...

CVE-2019-1010308

Aquaverde Aquarius CMS prior to version 4.1.1 is affected by Incorrect Access Control, enabling access to the log file without restriction. The vulnerability stems from improper access controls on log files and could disclose sensitive data such as passwords. Affected component: log file. Attack ...