Unscored CVE-2009-1745 EUVD-2009-1740GHSA-x36w-qj7h-6xwr

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-…

Published May 21, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.

References

http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt
20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities. mailing-list
profense-default-password(50852) vdb-entry