7.2
CVSSv2

CVE-2002-0486

Published: 12/08/2002 Updated: 11/07/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.

Vulnerable Product Search on Vulmon Subscribe to Product

workforceroi xpede 4.1

workforceroi xpede 7.0

Exploits

source: wwwsecurityfocuscom/bid/4344/info An issue has been reported in Xpede, which could lead to a compromise of user authentication information Reportedly, Xpede cookies containing username and password data is stored using a weak encryption method Therefore if a user obtains access to cookies reisding on a system, he/she may be abl ...