CVE:CVE-2008-3717
CNNVD:CNNVD-200808-255
Harmoni是一个由MiddleburyCollege课程技术组领导发起的项目，旨在建立起一个应用程序框架及基于标准的基础总线，以支持迅速发展的IT课程。
Harmoni 1.6.0之前的版本存在信息泄露漏洞。在提供用户名列表和资产信息时，Harmoni不需要验证管理权限，这使得远程攻击者可以获得敏感信息。
solution:Upgrade harmoni harmoni to a higher version than 1.4.7,0.0.2,0.0.3,0.0.4,0.0.5,0.1.0,0.2.0,0.3.0,0.3.1,0.3.2,0.5.1,0.6.0,0.6.2,0.7.0,0.7.1,0.7.2,0.7.6,0.7.7,0.9.0,0.10.1,0.11.0,0.12.0,0.12.1,0.12.3,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.13.5,0.13.6,0.13.7,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.1.0,1.3.0,1.3.2,1.3.4,1.3.5,1.4.2,1.4.6,and avoid the version (,1.4.7],0.0.2,0.0.3,0.0.4,0.0.5,0.1.0,0.2.0,0.3.0,0.3.1,0.3.2,0.5.1,0.6.0,0.6.2,0.7.0,0.7.1,0.7.2,0.7.6,0.7.7,0.9.0,0.10.1,0.11.0,0.12.0,0.12.1,0.12.3,0.13.0,0.13.1,0.13.2,0.13.3,0.13.4,0.13.5,0.13.6,0.13.7,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.1.0,1.3.0,1.3.2,1.3.4,1.3.5,1.4.2,1.4.6