CVE-2002-0579

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2002-04/0273.html · Patch
• iss.net/security_center/static/8900.php · Patch
• securityfocus.com/bid/4552 · Patch

xpede のその他の脆弱性

• CVE-2002-0487中 4.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local u…
• CVE-2002-0486高 7.2Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the c…
• CVE-2002-0584中 5.0WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, w…
• CVE-2002-0583中 5.0WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp di…
• CVE-2002-0582中 5.0WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote…