Juha-Matti Laurio
09/10/08, 00:55
The vendor fixed the issue remarkable quickly, but
Additionally, the Last modified field in directory listings disclosed the timestamp of location information too.
Addresses like firstname.surname@domain.com disclosed confidential information about the people working in specific organizations too.
Juha-Matti
artful38@yahoo.com wrote:
> Looks like they closed the hole. Even using the hard-coded password, you can no longer get directory listings of email addresses (nor can you do so without credentials)
>
Additionally, the Last modified field in directory listings disclosed the timestamp of location information too.
Addresses like firstname.surname@domain.com disclosed confidential information about the people working in specific organizations too.
Juha-Matti
artful38@yahoo.com wrote:
> Looks like they closed the hole. Even using the hard-coded password, you can no longer get directory listings of email addresses (nor can you do so without credentials)
>