Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-0933
datalex plc
bookit! consumer
cve-2002-0933
plaintext storage
cookie
remote attackers
cross-site scripting
sniffing attacks
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.3%
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
Affected configurations
Node
datalexbookit_consumerRange≤2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| datalex:bookit_consumer | datalex bookit consumer | le | 2.1 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.3%
Related for CVE-2002-0933