CVE-2009-2429: SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files an...

Security readout for executives and security teams

This report says SmartFilter Web Gateway Security 4.2.1.00 may save user credentials in cleartext backup XML files with weak file permissions. A local user on the appliance or host could read those credentials and potentially gain higher privileges. The evidence is old and explicitly based only on third-party reporting. Exposure is most likely limited to legacy SmartFilter Web Gateway Security 4.2.1.00 systems still deployed or retained in backups. The source bundle does not prove broader product or version impact. Treat this as a legacy exposure check, not an internet-wide emergency. Prioritize validation if the organization ever deployed SmartFilter, because stored credentials can create lateral movement or privilege escalation risk. Mitigation focus: Inventory for SmartFilter Web Gateway Security 4.2.1.00 deployments.; Check vendor or McAfee guidance for supported fixes or retirement advice.; Restrict local access to gateway hosts and backup locations..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.