Re: Vulnerability? Or...not so much?

[Charles Buchholtz <chip+educause () SEAS UPENN EDU>]

On Sat, Apr 03, 2010 at 10:59:23PM -0400, Jason Testart wrote:
> If your pentest discovered this, then I would think a real BadGuy could
> discover it too.

White box or black box pentest?  If it was a white box pentest it
might have flagged a "document available with no password protection"
when the URI was acting as the username/password.

If it was black box pen testing, then I agree!

--- Chip

Charles H. Buchholtz                    Director of Systems Programming
chip () seas upenn edu            School of Engineering and Applied Science
http://www.seas.upenn.edu/~chip           University of Pennsylvania