Vulnerability Details CVE-2009-1466
Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- http://securitytracker.com/id?1022204
- http://www.securityfocus.com/archive/1/503434/100/0/threaded
- http://www.securityfocus.com/bid/34911
- http://www.syhunt.com/advisories/?id=aas-multiple
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50590
- http://securitytracker.com/id?1022204
- http://www.securityfocus.com/archive/1/503434/100/0/threaded
- http://www.securityfocus.com/bid/34911
- http://www.syhunt.com/advisories/?id=aas-multiple
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50590
Products affected by CVE-2009-1466
-
cpe:2.3:a:klinzmann:application_access_server:2.0.48