PT-2006-4290 · Taskjitsu · Taskjitsu

Published 2006-07-06 · Updated 2024-02-14 · CVE-2006-3398

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Taskjitsu versions prior to 2.0.1

Description The issue concerns the "change password forms" in Taskjitsu, where password hashes are included in hidden form fields. This allows remote attackers to obtain sensitive information from the Category Editor and User Information editor.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Category Editor and User Information editor to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3398

Affected Products

Taskjitsu

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-3398 · Security Note
• http://vupen.com/english/advisories/2006/2660 · Note
• https://pkrinternet.com/taskjitsu/task/3400 · Note
• http://pkrinternet.com/download/RELEASE-NOTES.txt · Note