Information disclosure in Inventivetec Mediacast

CVE-2011-2081

MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree.

Vulnerability class: Information Disclosure

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

Inventivetec Mediacast
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)