WHID 2006-38: Convenience or just bad design?

Share/Save

Altiris seems to have designed their servers so that it is easy to both access their customers upload as well as find out their e-mail addresses.

Additional information:

Attack Method: 
Insufficient Authorization
Incident Outcome: 
Disclosure Only