Security Advisory

CVE-2014-2212

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-01 17:00:00

Last updated 2024-08-06 10:06:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.

← Browse all CVEs View on cve.org ↗