NetSight
medium5.3

CVE-2019-19837

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTT…

Impact

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.

Affected products

VendorProductAffected versions
RuckuswirelessUnleashed
before 200.7.10.202.94
RuckuswirelessZonedirector 1200 Firmware
before 9.10.2.0.84
from 9.12.0 before 9.12.3.0.136
from 9.13.0 before 10.0.1.0.90
from 10.1.0 before 10.1.2.0.275
from 10.2.0 before 10.2.1.0.147
from 10.3.0 before 10.3.1.0.21

References