STVS ProVision version 5.9.10 suffers from an authenticated file disclosure vulnerability in archive.rb.