CVE-2014-2212

State: Published
Severity: Not scored
Published: Apr 1, 2014
Updated: Aug 6, 2024
Reserved: Feb 26, 2014

Description

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://www.sysdream.com/CVE-2014-2211_2214
http://www.sysdream.com/system/files/POSH-3.2.1-advisory_0.pdf
[oss-security] 20140227 [CVE assignment notification] Multiple vulnerabilities in POSHmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.