high7.5
CVE-2001-1536
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain una…
Impact
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audiogalaxy | Audiogalaxy | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html
- http://www.iss.net/security_center/static/7621.php
- http://www.securityfocus.com/bid/3587
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html
- http://www.iss.net/security_center/static/7621.php
- http://www.securityfocus.com/bid/3587