CVE-2016-1776

published 2016-03-24

CVE-2016-1776: Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain…

medium 5.3 CVSS 3.0

AV N AC L PR N UI N S U C L I N A N

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x_server	<= 5.0.15	—
apple	os_x_server	—	—

CWE-284