Vulnerability Details CVE-2004-2578
phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 69.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/
- http://www.osvdb.org/8354
- http://www.securityfocus.com/bid/10895
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16970
- http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/
- http://www.osvdb.org/8354
- http://www.securityfocus.com/bid/10895
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16970
Products affected by CVE-2004-2578
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.1
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.10
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.12
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.13
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.2
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.3
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.4
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.5
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.6
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.7
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.8
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.9
-
cpe:2.3:a:phpgroupware:phpgroupware:0.9.9_pl1