|
Family: CGI abuses --> Category: infos
Synchrologic User account information disclosure Vulnerability Scan
Vulnerability Scan Summary Acertains if Synchrologic is installed
Detailed Explanation for this Vulnerability Test
The remote host seems to be running Synchrologic Email Accelerator
Synchrologic is a product which allows remote PDA users to synch with email,
calendar, etc.
If this server is on an Internet segment (as opposed to internal), you may
wish to tighten the access to the aggregate.asp page.
The server allows anonymous users to look at Top Network user IDs
Example : http://IP_ADDRESS/en/admin/aggregate.asp
Threat Level: Low
Click HERE for more information and discussions on this network vulnerability scan.
|