NVD

Id
69090  
Name
CVE-2005-3429  
Description
Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2005-11-02  
Modified Date
2017-07-10  
Seq
2005-3429  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357228 69090 CVE-2005-3429 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
357229 69090 CVE-2005-3429 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
357230 69090 CVE-2005-3429 1015117  View
357231 69090 CVE-2005-3429 http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf  View
357232 69090 CVE-2005-3429 mailsiteexpress-cookie-plaintext-password(22906)  View

Related JVN