CA ERwin Web Portal MIMM downloadScriptFile.do Information Disclosure Vulnerability

This vulnerability allows remote attackers to read nearly any system file, including database credentials, on a system with vulnerable installations of CA ERwin Web Portal's Meta Integration Metadata Management service. Authentication is not required to exploit this vulnerability. The specific fl...