CVE-2020-24246

CVE-2020-24246 affects Peplink Balance prior to 8.1.0rc1 where the Web Admin interface allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php). This is a disclosure in the web administration path, exposed via the web interface. Available connected d...