CVE-2006-2481

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and…

published July 31, 2006

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07194 · 94.3th percentile
Published
2006-07-31T19:00Z
EPSS history
Timeline
  • 31 JUL 19:00Z
    VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and…
    cvelistv5