CVE-2006-5161 IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the...
MediumCVSS 6.4
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm client security password manager | All versions | No fix listed |
References
- 1681 third-party-advisory
- 20061003 Security flaw in IBM Client Security Password Manager mailing-list
- 20308 vdb-entry