CVE-2009-1464: Klinzmann Application Access Server

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job.

Affected products

• Klinzmann Application Access Server: version 2.0.48 only

Published 2009-05-14. Last modified 2026-06-16.