Description

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.

Remediation

References

CVE-2023-6554

Related Vulnerabilities

Oracle JRE CVE-2013-5778 Vulnerability (CVE-2013-5778)

WordPress Plugin YARPP-Yet Another Related Posts Local File Inclusion (5.30.3)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-4475)

Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile PHP Object Injection (2.3.2.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-862 CVE-2023-6554