Administator only: Hidden files accessible if URL is known (MINDBREEZE15801)

ID: MINDBREEZE15801 
Affected Components: Mindbreeze InSpire G6, Mindbreeze InSpire G7 
Severity: 6.1 Medium 
Status: Final 
First published: February 2, 2021 

Summary

The Filemanager Component, requiring administrative privileges by default does not show system files. By knowing the exact file name the files can be displayed.

Remediation

Hotfix Information

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:

• Mindbreeze InSpire 20.5 Release (Version 20.5.1.835)
• Mindbreeze InSpire SaaS 20.5 Release (Version 20.5.1.835)