Количество 4
Количество 4
CVE-2008-1396
Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.
CVE-2008-1396
Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.
CVE-2008-1396
Plone CMS 3.x uses invariant data (a client username and a server secr ...
GHSA-hjp5-hv33-q58g
Plone credentials stored in session cookie
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2008-1396 Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network. | CVSS2: 4.3 | 1% Низкий | больше 18 лет назад |
 | CVE-2008-1396 Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network. | CVSS2: 4.3 | 1% Низкий | больше 18 лет назад |
| CVE-2008-1396 Plone CMS 3.x uses invariant data (a client username and a server secr ... | CVSS2: 4.3 | 1% Низкий | больше 18 лет назад |
| GHSA-hjp5-hv33-q58g Plone credentials stored in session cookie | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу