CVE-2002-0544 Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
HighCVSS 7.2
EPSS 0.79%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aprelium technologies abyss web server | = 1.0 | No fix listed |
References
- www.aprelium.com vendor-advisory
- 4467 vdb-entry vendor-advisory