CVE-2009-1466

MEDIUM 5.5CVE-2009-1466 · Published 14/05/2009 · updated 16/06/2026

In short

CVE-2009-1466 is a MEDIUM (CVSS 5.5) vulnerability affecting application access server (klinzmann).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 15.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
application access server klinzmann	`= 2.0.48`	No fix yet

Description

Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.

References

securitytracker.com/id · Broken Link
securityfocus.com/archive/1/503434/100/0/threaded · Broken Link
securityfocus.com/bid/34911 · Broken Link
syhunt.com/advisories · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/50590 · Third Party Advisory

More vulnerabilities in application access server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free