CVE-2016-8752

Description

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Affected products

• Apache Software Foundation / Apache Atlas0.6.0-incubating – 0.6.0-incubating
• Apache Software Foundation / Apache Atlas0.7.0-incubating – 0.7.0-incubating
• Apache Software Foundation / Apache Atlas0.7.1-incubating – 0.7.1-incubating

References

• MAILING_LISThttps://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E