Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi

Remote File Include In Coppermine Photo Gallery

Remote File Include In  copyright © James Coyle; JCcorp

From:	yearsilent_(at)_yahoo.com <yearsilent_(at)_yahoo.com>
Date:	24.03.2007
Subject:	ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. "

a authorized user to the "firewall analyzer" can access any common file on the system, it is should not be allowded