high7.5
CVE-2021-20114
When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which include…
Impact
When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecnick | Tcexam | through 14.8.1 |