system
Describe <CVE-2008-1291>.
user
What is <CVE-2008-1291>?
assistant
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder..