Test ID:	1.3.6.1.4.1.25623.1.0.106521
Category:	Web application abuses
Title:	ZoneMinder Information Disclosure Vulnerability (Nov 2016) - Active Check
Summary:	ZoneMinder is prone to an information disclosure and; authentication bypass vulnerability.
Description:	Summary: ZoneMinder is prone to an information disclosure and authentication bypass vulnerability. Vulnerability Insight: Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server. Vulnerability Impact: An unauthenticated remote attacker may browse all directories in the web root. Solution: Disable directory listings in the apache configuration. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10140 BugTraq ID: 96849 http://www.securityfocus.com/bid/96849 http://seclists.org/bugtraq/2017/Feb/6 http://seclists.org/fulldisclosure/2017/Feb/11
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.