CVE-2002-1521 Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.

LowCVSS 2.1 EPSS 0.35%

Published: 2004-09-01 07:00
Updated: 2026-06-17 00:59
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.

Affected products

Product	Affected versions	Fixed in
mdg computer services web server 4d	= 3.6	No fix listed

References

20020925 [SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability mailing-list vendor-advisory
webserver-4d-plaintext-passwords(10198) vdb-entry vendor-advisory
5803 vdb-entry vendor-advisory

CVSS v2.0

2.1 Low

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.35% (percentile 29.0)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.