Hyland Alfresco Improper Authorization Arbitrary File Read Vulnerability

A vulnerability in Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories, such as WEB-INF, through the '/share/page/resource/' endpoint. This file read access can lead to the disclosure of sensitive configuration files.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files, including configuration files that may contain critical application or server information.