Insecure Permissions in Hummingbird CyberDOCS 3.5, 3.9, and 4.0 Allow Remote Source Code Disclosure

Insecure Permissions in Hummingbird CyberDOCS 3.5, 3.9, and 4.0 Allow Remote Source Code Disclosure

CVE-2003-1102 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.

Learn more about our Cis Benchmark Audit For Microsoft Iis.