7.2high
CVE-2002-05441 exploit
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allo…
Published 24 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
1
Exploit-DB
Summary
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
Exploit prediction (EPSS)
0.79% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.
Exploits and detections
- EDB-21367 Abyss Web Server 1.0 - File Disclosure · remote · 2002-04-07
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
- aprelium.com /news/abws103.html · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/4467 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2002-0544
- NVD: CVE-2002-0544
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.