CVE-2002-0487 in WorkforceROI Xpede
Сводка (Английский)
Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser s cache.
Раскрытие
12.08.2002
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 18543 | WorkforceROI Xpede Javascript Пароль раскрытие информации | 200 | Не определено | Не определено | CVE-2002-0487 |