CVE-2009-1464: Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S...

Security readout for executives and security teams

This is an old CSRF issue in Application Access Server (A-A-S) 2.0.48. If an administrator is authenticated, a remote attacker could trick the admin’s browser into sending unwanted management requests that run programs, stop services, or terminate processes. Business urgency depends on whether this legacy product is still deployed and reachable. Exposure is likely limited to organizations still running Application Access Server (A-A-S) 2.0.48, especially where the administrative interface is reachable by administrators during normal browsing. The provided affected metadata is incomplete and lists no CPEs. Treat as priority only if A-A-S 2.0.48 is present. The potential impact is serious because administrative CSRF could trigger disruptive or system-level actions, but the issue is legacy and the supplied evidence does not show active exploitation. Mitigation focus: Inventory for Application Access Server (A-A-S) 2.0.48 installations.; Check vendor or advisory guidance for fixed versions or supported migration paths.; Restrict administrative access to trusted management networks only..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.