CVE

Id
87645  
CVE No.
CVE-2016-10140  
Status
Candidate  
Description
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server via the /events URI.  
Phase
Assigned (20170113)  
Votes
None (candidate not yet proposed)  
Comments