4.6

CVE-2002-0487

Exploit

EPSS 0.15%
Published 12.08.2002 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Workforceroi ≫ Xpede Version4.1

Workforceroi ≫ Xpede Version7.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.15%	0.368

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/archive/1/263485

Vendor Advisory

http://www.iss.net/security_center/static/8612.php

Vendor Advisory

http://www.securityfocus.com/bid/4346

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2002-0487

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0487

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0487

EUVD