CVE-2001-0372

Опубликовано: 18 июн. 2001

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html
Patch
Vendor Advisory
http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html
http://www.securityfocus.com/bid/2499
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6273
http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html
Patch
Vendor Advisory
http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html
http://www.securityfocus.com/bid/2499
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6273

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:akopia:akopia_interchange:*:*:*:*:*:*:*:*

Версия до 4.6.3 (включая)

cpe:2.3:a:akopia:akopia_interchange:4.5.3:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01552

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9522-c73r-qxp5

github

больше 3 лет назад