| Package | Affected versions | Patched versions |
|---|---|---|
| posh | = 1.0.1= 1.1.0= 1.2.0= 1.3.0= 1.3.2= 1.4.2= 1.5= 1.5.1= 2.0= 2.1= 2.2= 2.2.1= 2.2.3= 2.3= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.1.0= 3.1.1= 3.1.2= 3.2.1≤ 3.3.0 |
The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free