Date: 22 Mar 2007 09:56:35 -0000
From: [email protected]
To: [email protected]Subject: ManageEngine Firewall Analyzer arbitrary file disclosure to
authorized user
X-Virus-Scanned: antivirus-gw at tyumen.ru
"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. "
a authorized user to the "firewall analyzer" can access any common file on the system, it is should not be allowded
