Felipe Aragon

**Name of the Vulnerable Software and Affected Versions** Visual Synapse HTTP Server versions 0.60 and earlier, 1.0 RC1 through RC3 **Description** A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the URI. This could potentially expose sensitive information. **Recommendations** For versions 0.60 and earlier, and 1.0 RC1 through RC3, consider restricting access to sensitive files and directories until a patch is available. As a temporary workaround, consider disabling the ability to access files using the .. (dot dot) notation in the URI until a fix is released.

**Name of the Vulnerable Software and Affected Versions** Application Access Server (A-A-S) version 2.0.48 **Description** The issue allows remote attackers to hijack the authentication of administrators for requests, including executing arbitrary programs via a command job, stopping services via a setservice job, or terminating processes via a killprocess job. **Recommendations** For Application Access Server (A-A-S) version 2.0.48, consider disabling the `index.aas` module until a patch is available to prevent exploitation of the CSRF vulnerabilities. Restrict access to the setservice, killprocess, and command jobs to minimize the risk of unauthorized execution.

**Name of the Vulnerable Software and Affected Versions** Application Access Server (A-A-S) version 2.0.48 **Description** The issue allows remote attackers to gain access due to a default password set as 'wildbat' for the admin account. **Recommendations** For version 2.0.48, change the default admin password to a strong and unique password to prevent unauthorized access.

**Name of the Vulnerable Software and Affected Versions** Application Access Server (A-A-S) version 2.0.48 **Description** The issue allows local users to obtain sensitive information, including passwords and the port keyword, by reading the aas.ini file, as this information is stored in cleartext. **Recommendations** For version 2.0.48, consider encrypting or securely storing sensitive information in the aas.ini file to prevent unauthorized access. As a temporary workaround, restrict access to the aas.ini file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HTTP File Server (HFS) versions prior to 2.2c **Description** The issue allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication. **Recommendations** For versions prior to 2.2c, update to version 2.2c or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HTTP File Server (HFS) versions prior to 2.2c **Description** The issue allows remote attackers to obtain configuration and usage details. This can be achieved by using a specific `id` element, such as `<id>%version%</id>`, in HTTP Basic Authentication instead of a username and password. For example, an attacker could place this `id` element in the `userinfo` subcomponent of a URL, like `'http://example.com/%3Cid%3E%25version%25%3C/id%3E'`, to exploit this issue. **Recommendations** For versions prior to 2.2c, update to version 2.2c or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP File Server until the update can be applied.