CVE-2022-3206

Passster < 3.5.5.5.2 - Insecure Storage of Password

Medium · published October 17, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00572 · 46.6th percentile
Published
2022-10-17T00:00Z
EPSS history
Timeline
  • 17 OCT 00:00Z
    Passster < 3.5.5.5.2 - Insecure Storage of Password
    cvelistv5