TUCoPS :: Security App Flaws

TUCoPS :: Security App Flaws :: tb13589.htm
CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability
ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability
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