VULNERABILITY INTELLIGENCE

CVE-2009-2024

CVSS score5 MEDIUM

EPSS probability2.29%

CISA KEVNot currently listed

Published2009-06-09

Last modified2026-06-16

Description

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt.