Describe CVE-2008-1291.
What is CVE-2008-1291?
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder..