Description
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
References
- 5969 vdb-entry
- ingenium-config-sensitive-information(10387) vdb-entry
- 20021015 Ingenium Admin Password Vulnerability mailing-list