CVE-2002-0486 Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
HighCVSS 7.2
EPSS 0.79%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| workforceroi xpede | = 4.1 | No fix listed |
| workforceroi xpede | = 7.0 | No fix listed |
References
- 20020322 Xpede passwords exposed (2 vuln.) mailing-list vendor-advisory
- 4344 exploit vdb-entry vendor-advisory
- xpede-password-weak-encryption(8614) vdb-entry