Census CSWeb Information Disclosure Vulnerability in Configuration Files

A vulnerability in Census CSWeb version 8.0.1 allows the 'app/config' directory to be accessed via HTTP in certain deployments. This exposure enables remote, unauthenticated attackers to send requests for configuration files, potentially leading to the disclosure of sensitive information such as secrets. The issue has been addressed in version 8.1.0 alpha.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of configuration files, which may contain sensitive information like application secrets. Such exposure could facilitate further attacks or compromises.

Reproduction

The vulnerability can be reproduced by sending an HTTP request to the 'app/config' directory of a server running Census CSWeb version 8.0.1. This can be done using a web browser or a tool like cURL, without the need for authentication.

Remediation

Users can upgrade to Census CSWeb version 8.1.0 alpha to address this vulnerability.