Vulnerability Details CVE-2001-1536
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html
- http://www.iss.net/security_center/static/7621.php
- http://www.securityfocus.com/bid/3587
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html
- http://www.iss.net/security_center/static/7621.php
- http://www.securityfocus.com/bid/3587
Products affected by CVE-2001-1536
-
cpe:2.3:a:audiogalaxy:audiogalaxy:-