CVE-2015-9256: Exposure of Sensitive Information to an Unauthorized Actor

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...