PT-2001-1591 · Akopia · Akopia Interchange

Publicado 2001-05-24 · Atualizado 2017-12-19 · CVE-2001-0372

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Akopia Interchange versions 4.5.3 through 4.6.3

Description The issue allows a remote attacker to gain administrative access due to demo stores being installed with a default group account :backup that has no password. This can be exploited via the demo stores, including (1) barry, (2) basic, or (3) construct.

Recommendations For versions 4.5.3 through 4.6.3, change the password of the :backup group account to prevent unauthorized access. Consider removing or securing the demo stores (barry, basic, construct) until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2001-0372

Produtos afetados

Akopia Interchange

Referências · 5

• 🔥 http://securityfocus.com/bid/2499 · Exploit
• http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0372 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6273 · Nota