PT-2009-3351 · Downloadcenter · Downloadcenter

Published 2009-02-24 · Updated 2017-08-17 · CVE-2009-0732

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Downloadcenter version 2.1

Description The issue allows remote attackers to obtain user credentials and other sensitive information via a direct request to a file stored under the web root with insufficient access control. The file common.h is accessible, which contains sensitive information.

Recommendations For Downloadcenter version 2.1, restrict access to the common.h file to prevent remote attackers from obtaining sensitive information. Consider moving the file outside of the web root or implementing proper access controls to mitigate the risk.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0732

Affected Products

Downloadcenter

References · 4

• http://secunia.com/advisories/33992 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0732 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48862 · Note
• http://osvdb.org/52180 · Note