CVE-2005-3429

Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local…

published November 2, 2005

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02416 · 83.9th percentile
Published
2005-11-02T11:00Z
EPSS history
Timeline
  • 02 NOV 11:00Z
    Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local…
    cvelistv5