09.24.2003

A vulnerability in the GUI of the RaQ3 and RaQ4 can lead to undue disclosure of information.
The directory in which Analog stores its report files lacks proper .htaccess protection and can therefore be viewed without authentication.

To prevent this run the following command as root:

cp /usr/admserv/html/.cobalt/services/.htaccess /home/.cobalt/report/.htaccess

That will copy a .htaccess file to that directory and will make sure that only user admin can view the Analog report files.