CVE-2009-1466

CVSS 5.5 - MEDIUM

Description

Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.

Affected Products

Vendor	Product	Version
klinzmann	application_access_server	`2.0.48`

References

http://securitytracker.com/id?1022204

http://www.securityfocus.com/archive/1/503434/100/...

http://www.securityfocus.com/bid/34911

http://www.syhunt.com/advisories/?id=aas-multiple

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://securitytracker.com/id?1022204

http://www.securityfocus.com/archive/1/503434/100/...

http://www.securityfocus.com/bid/34911

http://www.syhunt.com/advisories/?id=aas-multiple

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

CWE-312

CVE Information

CVE ID:: CVE-2009-1466
Published:: 2009-05-14
Modified:: 2026-04-23
CVSS Score:: 5.5
Severity:: MEDIUM
Vector:: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Vendors

klinzmann

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL