CVE-2001-0372

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-06-18 · updated 2026-06-16

Description

Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.

Affected products

Akopia Interchange: through 4.6.3; 4.5.3

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html
http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html
http://www.securityfocus.com/bid/2499
https://exchange.xforce.ibmcloud.com/vulnerabilities/6273
http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html
http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html
http://www.securityfocus.com/bid/2499
https://exchange.xforce.ibmcloud.com/vulnerabilities/6273

Get alerted when CVE-2001-0372 or the next vulnerability affects your stack