Vulnerabilities > CVE-2002-1909 - Information Disclosure vulnerability in Click2Learn Ingenium Learning Management System 5.1/6.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |