Web Directory Access Vulnerability in Apache Atlas by The Apache Software Foundation

CVE-2016-8752

What is CVE-2016-8752?

The vulnerability in Apache Atlas allows unauthorized access to sensitive webapp directory contents. By navigating to specific URIs such as /js and /img, an attacker can retrieve information that should not be publicly accessible. This poses a significant risk, particularly for configurations that do not adequately restrict access to these directories. Users of affected versions are advised to apply the available updates to secure their deployments against potential exploitation.

References