Vulnerabilities > Chaozz > Fireant > 1.2

DATE CVE VULNERABILITY TITLE RISK
2009-03-24 CVE-2009-1052 Permissions, Privileges, and Access Controls vulnerability in Chaozz Fireant 1.0/1.2
FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.
network
low complexity
chaozz CWE-264
5.0