Description

Due to a misconfiguration of a web server, qdPM configuration files are accessible for unauthenticated users

Remediation

Restrict access to configuration files

References

qdPM

Related Vulnerabilities

Unrestricted access to Prometheus Metrics

WordPress Plugin WP PHP widget Information Disclosure (1.0.2)

WordPress Plugin NextGEN Gallery-WordPress Gallery Information Disclosure (1.9.11)

Node.js Inspector Unauthorized Access Vulnerability

WordPress Plugin Gravity Forms Information Disclosure (2.4.8)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure CWE-260