Control Web Panel

WebPanel => CentOS-WebPanel GUI => Topic started by: gert on May 20, 2018, 10:31:28 PM

Title: Security risk: Client File Manager reveals all clients on server.
Post by: gert on May 20, 2018, 10:31:28 PM

When a user opens the File Manager it starts in the following path:

/usr/local/cwpsrv/var/services/users/{user}

instead of

/home/{user}

and thus showing all the usernames on the server. This started happening after the last update, I did a clean install on a test server and the problem persists.