According to its version number, the remote version of A-A-S Application Access Server is prone to multiple security issues including a cross-site request-forgery vulnerability, an insecure-default-password vulnerability and an information-disclosure vulnerability. Attackers can exploit these issues to run privileged commands on the affected computer and gain unauthorized administrative access to the affected application and the underlying system. These issues affect version 2.0.48 other versions may also be affected.

• http://www.securityfocus.com/bid/34911

---

Updated on 2015-03-25