Description
The Haproxy provides Data Plane API for accessing various information and configuring it. Acunetix determined that it was possible to access this API without authentication or using weak/known login and password.
Remediation
Restrict access to the Haproxy Data Plane API interface
References
Related Vulnerabilities
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3195)
WordPress Plugin Simple History Information Disclosure (2.7.4)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0724)
WordPress Plugin Customer Reviews for WooCommerce Multiple Vulnerabilities (5.3.5)