Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
aquaforest tiff server 4.0