CVE-2004-1532

CVE-2004-1532 describes a critical vulnerability in AppServ 2.5.x and earlier versions, where the software installs with a default username and password. This misconfiguration allows remote attackers to easily gain unauthorized access to affected systems. With a CVSS score of 7.5, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest among security researchers.