TI-2008-06184 CVE-2008-6494 · GHSA-4hvv-pc2w-v673ASP User Engine.NET stores sensitive information under the web root with insufficient…Priority LOW 27ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02229 · Published 2009-03-20 · No fix listed CWE-264