PT-2002-2522 · Phprank · Phprank

CVE-2002-1800 · Publicado 2002-12-31 · Atualizado 2024-02-10

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpRank version 1.8

Description The issue allows remote attackers to retrieve the administrative password because it is stored in plaintext on the server and in the ap cookie.

Recommendations For phpRank version 1.8, consider disabling the use of the ap cookie or restricting access to the administrative interface until a secure method of storing passwords is implemented. Avoid using plaintext storage for sensitive information like administrative passwords.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2002-1800

Produtos afetados

Phprank

Referências · 5

• http://securityfocus.com/bid/5947 · Nota
• https://t.me/cvenotify/70920 · Publicação no Telegram
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html · Aviso do Fabricante
• http://iss.net/security_center/static/10352.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1800 · Nota de Segurança