CVE-2009-2022: Medium severity fipsASP Fipscms Light vulnerability
Published Jun 9, 2009
·Updated
fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for fipsdb/db.mdb.
Affected Software
1 affected component
fipsASP Fipscms Light=2.1
Event History
Jun 9, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2022?
CVE-2009-2022 has a high severity rating due to its ability to expose sensitive information without proper access controls.
2
How do I fix CVE-2009-2022?
To fix CVE-2009-2022, ensure that sensitive files are stored outside of the web root and implement proper access controls.
3
What information is at risk in CVE-2009-2022?
CVE-2009-2022 exposes a database file that may contain sensitive user information and credentials.
4
Which software version is affected by CVE-2009-2022?
CVE-2009-2022 specifically affects fipsCMS Light version 2.1.
5
Can remote attackers exploit CVE-2009-2022 easily?
Yes, remote attackers can easily exploit CVE-2009-2022 by directly requesting the vulnerable database file.