Sensitive files were left in a publicly accessible directory during a maintenance window
Date:
06 September 2000
Incident Type: Vulnerability Disclosure
WASC Threat Classification: Information Leakage, Insufficient Authentication
Error message revealed a database file location, which could be downloaded.
References:
Date:
06 September 2000
Incident Type: Vulnerability Disclosure
WASC Threat Classification: Information Leakage
E-mail addresses of other customers displayed by mistake, no hacking was required
References:
This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.
