Versions Compared

Version Old Version 1 New Version 2
Changes made by

Alex

Alex

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Page Properties
STRIDEInformation Disclosure
Damage potential0
Reproducibility10
Exploitability10
Affected users10
Discoverability10
DREAD Score8

At In-Portal all user uploaded files are stored in "/system/" folder, which accessible from the Web. This way an attacker can probe that folder to see which of files he/she is interested in is present to perform his attack.

...