CVE-2009-1745: Armorlogic Profense Web Application Firewall

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.

Affected products

• Armorlogic Profense Web Application Firewall: up to and including 2.2.21; version 2.4 only

Published 2009-05-21. Last modified 2026-06-16.