AlterPath Manager (APM) Console Server
AlterPath Manager (APM) reveals sensitive system information without authentication.
AlterPath Manager 1.1.0 and below
The APM reveals sensitive information, including:
This information is available through the web interface via the /about.html page.
This issue was corrected in APM release 1.2.0. For older versions, it may be possible to disable the web interface and connect to consoles via SSH only.
Updated information can be found on OSVDB.org under the following entries:
|OSVDB-14073||Cyclades AlterPath Manager Information Disclosure|