medium5.3
CVE-2016-0870
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
Impact
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trane | Tracer Sc | through 4.2.1134 |