Security risk: Client File Manager reveals all clients on server.

Started by gert, May 20, 2018, 10:31:28 PM

Previous topic - Next topic

gert

When a user opens the File Manager it starts in the following path:

/usr/local/cwpsrv/var/services/users/{user}

instead of

/home/{user}

and thus showing all the usernames on the server. This started happening after the last update, I did a clean install on a test server and the problem persists.