high7.2Public exploit code
CVE-2002-0486
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain priv…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WorkforceROI Xpede 4.1/7.0 - Weak Password Encryption2002-03-22 · local · windows · Verified
Impact
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Workforceroi | Xpede | Versions 4.1, 7.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/263485
- http://www.securityfocus.com/bid/4344
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8614
- http://www.securityfocus.com/archive/1/263485
- http://www.securityfocus.com/bid/4344
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8614