Description (CNA)
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://code.google.com/p/cantata/issues/detail?id=356
- http://seclists.org/oss-sec/2014/q1/124
- http://seclists.org/oss-sec/2014/q1/121
ADP enrichment
No English description supplied.