A security issue has been reported in the amaroK Web Frontend plugin for amaroK, which can be exploited by malicious people to disclose potentially sensitive information.

The problem is that the configuration settings are stored in the file "globals.inc" inside the web root, which may allow disclosure of the username and password for the underlying database.

The security issue has been reported in version 1.3. Prior versions may also be affected.

Solution
Update to version 1.3.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers