BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.06
EPSS Ranking 90.4%