MTN Group · Report #789388
Accessible Restricted directory on [bcm-bcaw.mtn.cm]
Validstatus
mediumseverity
15upvotes
15 Jul 2020disclosed
How it was found
Summary:
- There are some exposed
directory/filespublicly accessible for anyone, when it should be restricted on the server
Steps To Reproduce:
- Go to
http://bcm-bcaw.mtn.cm/wp-content/uploads/and navigate between available folders
==Poc:== {F707036}
Impact
- Every uploaded data can be accessible through this directory listing vulnerability
- This might include several private/confidential data