Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenti…

CVE-2017-20217 affects Serviio PRO 1.8, exposing an information disclosure vulnerability in the Configuration REST API. The vulnerability stems from improper access control enforcement that allows unauthenticated remote attackers to access sensitive configuration data. Attackers can exploit this by sending specially crafted requests to REST API endpoints without requiring authentication. This vulnerability allows unauthorized access to potentially sensitive configuration information. The issue has been documented across multiple security advisory platforms and exploit databases.