SOUND4 Impact/Pulse/First/Eco Information Disclosure Vulnerability

An information disclosure vulnerability exists in SOUND4 Impact, Pulse, First, and Eco versions through 2.x. This vulnerability allows unauthenticated attackers to access sensitive log files by directly browsing the /log directory. The exposed logs may contain critical system and personal information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive log files, including personal and system information.

Reproduction

To reproduce this vulnerability, navigate to the /log directory on a server running the affected SOUND4 application. No authentication is required to access the log files, which will contain sensitive information that could be exploited.