Vulnerability in Phpgroupware

CVE-2004-2576

class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files.

EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.

Affected products

Phpgroupware — versions 0.9.16.000
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Exploit)