InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server127.0.0.1 request.
Publication date: Wed, 21 Oct 2020 01:15:00 +0000