CVE-2020-24246

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...

CVE-2020-24246

CVE-2020-24246 affects Peplink Balance prior to 8.1.0rc1 where the Web Admin interface allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php). This is a disclosure in the web administration path, exposed via the web interface. Available connected d...