CVE-2002-0544
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in...
CVE-2002-0544 is a high vulnerability (CVSS 7.2) in Aprelium Technologies Abyss Web Server, published June 11, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. No source names a fixed version.
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
Exploit likelihood
What each source reports
NVD Score used
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
- Record
CVE-2002-0544- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
- Record
CVE-2002-0544- Updated
- 2026-11-02
EUVDEUVD-2002-0539 No score
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
- Record
EUVD-2002-0539- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-972q-rg59-8qx4 No score
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in...
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
- Record
GHSA-972q-rg59-8qx4- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Abyss Web Server 1.0 - File Disclosure | 2002-04-07 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |