Vulnerabilities

TI-2009-01390 CVE-2009-1466 · GHSA-pgr3-8qx7-6j82

Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in…

LOW 24

Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0024 Published 2009-05-14 No fix listed CWE-312

TI-2009-01389 CVE-2009-1465 · GHSA-cq2w-vhhm-7v5j

Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the…

LOW 36

Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01402 Published 2009-05-14 No fix listed CWE-255

TI-2009-01388 CVE-2009-1464 · GHSA-g4rw-j5pq-mqc4

Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00728 Published 2009-05-14 No fix listed CWE-352

Vulnerabilities

Filters

Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in…

Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the…

Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application…