The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/18413
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1220
http://www.securityfocus.com/bid/11869