1. Bug Reports
  2. Bugs
0
Under review

WARNING!! web.config is visible to outside individuals.

Chuck Cuthbertson 2 years ago • updated by RylosGato 2 years ago • 1
WARNING!! web.config is visible and hackers can see the AD integration account entered!! This is a huge vulnerability which ConnectWise will not address.
ConnectWise Control Version:
20.4
Server Affected:
Host Client Affected:
Guest Client Affected:
RylosGato 2 years ago

How exactly are you accessing this? I have tried to pull my web.config and it says "This type of page is not served"

Customer support service by UserEcho