Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x 1.0.0.4d and earlier allows remote unauthenticated users to view add and remove users via a configuration error.