CVE-2014-2212

Published: Apr 1, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.

Affected (38)

Products: Posh Project: Posh

Posh Project

1 product

Posh

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Posh Project Posh	Up to 3.3.0
Posh Project Posh	Version 1.0.1
Posh Project Posh	Version 1.1.0
Posh Project Posh	Version 1.2.0
Posh Project Posh	Version 1.3.0
Posh Project Posh	Version 1.3.2
Posh Project Posh	Version 1.4.2
Posh Project Posh	Version 1.5.1
Posh Project Posh	Version 1.5
Posh Project Posh	Version 1.5 beta2
Posh Project Posh	Version 1.5 beta
Posh Project Posh	Version 1.5 rc
Posh Project Posh	Version 2.0
Posh Project Posh	Version 2.0 beta2
Posh Project Posh	Version 2.0 beta
Posh Project Posh	Version 2.0 p1
Posh Project Posh	Version 2.0 rc
Posh Project Posh	Version 2.1
Posh Project Posh	Version 2.1 b
Posh Project Posh	Version 2.1 p1
Posh Project Posh	Version 2.1 p2
Posh Project Posh	Version 2.1 rc
Posh Project Posh	Version 2.2.1
Posh Project Posh	Version 2.2.3
Posh Project Posh	Version 2.2
Posh Project Posh	Version 2.2 beta
Posh Project Posh	Version 2.2 rc
Posh Project Posh	Version 2.3
Posh Project Posh	Version 3.0.1
Posh Project Posh	Version 3.0.2
Posh Project Posh	Version 3.0.3
Posh Project Posh	Version 3.0.4
Posh Project Posh	Version 3.0
Posh Project Posh	Version 3.0 beta
Posh Project Posh	Version 3.1.0
Posh Project Posh	Version 3.1.1
Posh Project Posh	Version 3.1.2
Posh Project Posh	Version 3.2.1