Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.Referenceshttps://www.criticalstart.com/resources/https://www.aquaforest.com/en/release_history.asphttps://www.criticalstart.com/multiple-vulnerabilities-discovered-in-tiff-server-from-aquaforest/