PT-2005-5354 · Six Apart · Movable Type

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4689

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Six Apart Movable Type version 3.16

Description The issue allows remote attackers to login to an account by sniffing a cookie that contains account names and password hashes.

Recommendations For version 3.16, consider implementing secure cookie handling practices to prevent unauthorized access, such as using secure protocols for cookie transmission and restricting access to sensitive information stored in cookies.

Correção

Identificadores relacionados

CVE-2005-4689

Produtos afetados

Movable Type

Referências · 4

• http://sixapart.com/movabletype/docs/3.2/h_changelog/3_2.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4689 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4689 · Nota