CVE-2008-1394

Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote…

published March 20, 2008

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01438 · 72.9th percentile
Published
2008-03-20T00:00Z
EPSS history
Timeline
  • 20 MAR 00:00Z
    Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote…
    cvelistv5