TI-2009-03434 CVE-2009-3597 · GHSA-rhf3-73p2-27rmDigitaldesign CMS 0.1 stores sensitive information under the web root with insufficient…Priority LOW 29Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03205 · Published 2009-10-08 · No fix listed CWE-552