medium6.5
CVE-2020-25351
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6.
Impact
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read files on the system via a crafted request sent to to the /lib/crud/configcompare.crud.php script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rconfig | Rconfig | Version 3.9.5 |