CVE

Id
49421  
CVE No.
CVE-2011-1509  
Status
Candidate  
Description
The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.  
Phase
Assigned (20110323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536443 49421 CVE-2011-1509 BUGTRAQ:20110914 CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus  View
536444 49421 CVE-2011-1509 URL:http://www.securityfocus.com/archive/1/archive/1/519652/100/0/threaded  View
536445 49421 CVE-2011-1509 MISC:http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp  View
536446 49421 CVE-2011-1509 BID:49636  View
536447 49421 CVE-2011-1509 URL:http://www.securityfocus.com/bid/49636  View
536448 49421 CVE-2011-1509 SREASON:8385  View
536449 49421 CVE-2011-1509 URL:http://securityreason.com/securityalert/8385  View
536450 49421 CVE-2011-1509 XF:servicedesk-loginjs-security-bypass(69841)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34171 JVNDB-2011-004413 HP OpenView Storage Data Protector の inet サービスにおけるサービス運用妨害 (DoS) の脆弱性 HP OpenView Storage Data Protector の inet サービスには、サービス運用妨害 (NULL ポインタデリファレンスおよびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-1514 49421 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004413.html  View