Actions
Bug #3498
closedWake on Lan Widget no auth needed
Start date:
03/02/2014
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:
Description
Wake on Lan Widget doesn't include "guiconfig.inc", so no auth is required when accessing it remotely, this could leak information about MAC address that has Wake on Lan enabled:
https://github.com/pfsense/pfsense/blob/master/usr/local/www/widgets/widgets/wake_on_lan.widget.php
Actions