What’s Vulnerable › Vulnerabilities
CVE-2001-1550
- Severity: low (CVSS 2.1 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2001-12-31 · updated 2026-06-16
Description
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.
Affected products
- Centra Asp: all versions
- Centraone: 5.2
- Centra Smart Connect: cen5.2-03
References
- http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.html
- http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.html
- http://www.securityfocus.com/bid/3704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7820
- http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.html
- http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.html
- http://www.securityfocus.com/bid/3704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7820
Get alerted when CVE-2001-1550 or the next vulnerability affects your stack