CVE-2002-0487 Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by....
MediumCVSS 4.6
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| workforceroi xpede | = 4.1 | No fix listed |
| workforceroi xpede | = 7.0 | No fix listed |
References
- xpede-reauth-plaintext-password(8612) vdb-entry vendor-advisory
- 20020322 Xpede passwords exposed (2 vuln.) mailing-list vendor-advisory
- 4346 exploit vdb-entry vendor-advisory