Full title: ABB Cylon Aspect 3.08.01 mapConfigurationDownload.php Configuration Download Vulnerability 
Category: web applications
Platform: php
ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated configuration download vulnerability. This can be exploited to download the SQLite DB that contains the configuration mappings information via the FTControlServlet by directly calling the mapConfigurationDownload.php script.

# 0day.today @ http://0day.today/