ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

[yearsilent () yahoo com]

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and 
reports information on enterprise-wide firewalls, proxy servers, and radius servers. "

a authorized user to the "firewall analyzer" can access any common file on the system, it is should not be allowded