Microsoft Windows FSCTL_FIND_FILES_BY_SID Information Disclosure
Posted by deepcore on October 17, 2018 – 3:42 pm
On Microsoft Windows, the FSCTL_FIND_FILES_BY_SID control code does not check for permissions to list a directory leading to disclosure of file names when a user is not granted FILE_LIST_DIRECTORY access.
Post a reply
You must be logged in to post a comment.