CVE-2009-4806: admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentic...

Security readout for executives and security teams

This flaw affects Digital Interchange Document Library 1.0.1. A remote attacker may be able to read or change administrator credentials because an administrative user-saving page lacks required administrator authentication. That creates a direct account takeover risk if the application is still deployed and reachable. Exposure is likely limited to legacy Digital Interchange Document Library 1.0.1 deployments, especially internet-accessible instances exposing the admin/save_user.asp path. The bundle does not identify other affected versions or products. Treat this as high priority only if the legacy application is still reachable. The business risk is administrator account compromise, but the available evidence is old and incomplete, so urgency depends on confirmed deployment exposure. Mitigation focus: Identify any Digital Interchange Document Library 1.0.1 instances in production or archives.; Check vendor or maintainer guidance for a supported fix or replacement.; Restrict network access to administrative paths while remediation is assessed..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.