JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Jbook |
Nexusjnr |
- (including) |
- (including) |
References