Joomla JoomDOC Component File Disclosure Vulnerability

SECUNIA ADVISORY ID:
SA40314

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/40314/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=40314

RELEASE DATE:
2010-07-03
DESCRIPTION:
A vulnerability has been reported in the JoomDOC component for
Joomla, which can be exploited by malicious users to disclose
potentially sensitive information.

For more information:
SA40291

The vulnerability is reported in version 2.0.2. Other versions may
also be affected.

SOLUTION:
Restrict access for accounts with "upload" and "edit" permissions to
trusted users only.

PROVIDED AND/OR DISCOVERED BY:
An anonymous person.