ID:5844 - Exploit for Exposure of Backup File to an Unauthorized Control Sphere in FlexAir - CVE-2019-7667

The vulnerability allows a remote attacker to gain full access to the target system.

The vulnerability exists due to the application generates database backup files with a predictable name. A remote authenticated attacker can download the database file and disclose login information, bypass authentication and have full access to the system.