Microsoft Windows FSCTL_FIND_FILES_BY_SID Information Disclosure

On Microsoft Windows, the FSCTL_FIND_FILES_BY_SID control code does not check for permissions to list a directory leading to disclosure of file names when a user is not granted FILE_LIST_DIRECTORY access.


MD5 | 1ad1fd11e41df6d259aeb00e3e6cc367


Related Posts