CVE-2016-10140 -- zoneminder| ID: oval:org.secpod.oval:def:1900872 | Date: (C)2019-03-05 (M)2023-12-20 |
| Class: VULNERABILITY | Family: unix |
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server via the /events URI.
| Platform: |
| Ubuntu 16.04 |
| Ubuntu 14.04 |
