Description
Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.
References
- http://www.syhunt.com/advisories/?id=aas-multiple
- 20090512 Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities mailing-list
- 34911 vdb-entry
- aas-aas-info-disclosure(50590) vdb-entry
- 1022204 vdb-entry