CVE-2002-0487

Published: Aug 12, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.

Affected (2)

Products: Workforceroi: Xpede

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Workforceroi Xpede	Version 4.1
Workforceroi Xpede	Version 7.0

References (6)

http://www.iss.net/security_center/static/8612.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/263485

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/4346

Source: cve@mitre.org

ExploitVendor Advisory

http://www.iss.net/security_center/static/8612.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/263485

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/4346

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.