CVE-2002-0487 in Xpede
要約 (英語)
Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser s cache.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
公開
2002年08月12日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 18543 | WorkforceROI Xpede Javascript パスワード 情報漏えい | 200 | 未定義 | 未定義 | CVE-2002-0487 |