CVEvulnerability
CVE-2002-0487
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.
Affected configurations
• workforceroi xpede 4.1
• workforceroi xpede 7.0
References
- http://www.iss.net/security_center/static/8612.php Vendor Advisory
- http://www.securityfocus.com/archive/1/263485 Vendor Advisory
- http://www.securityfocus.com/bid/4346 Exploit, Vendor Advisory
- http://www.iss.net/security_center/static/8612.php Vendor Advisory
- http://www.securityfocus.com/archive/1/263485 Vendor Advisory
- http://www.securityfocus.com/bid/4346 Exploit, Vendor Advisory