CVE-2001-0372

CVE-2001-0372 describes a critical vulnerability in Akopia Interchange versions 4.5.3 through 4.6.3, where demo stores are installed with a default, password-less 'backup' administrative account. This allows any remote attacker to gain full administrative control over the affected e-commerce platforms. With a CVSS score of 10.0 (Critical), the vulnerability is easily exploitable over the network with no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While there is no known public exploit code or active exploitation, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.