Home  >  CVE-2002-1647
CVE Details for CVE: CVE-2002-1647
Summary
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.
Timestamps
Last major update 18-10-2016 - 02:27
Published 31-12-2002 - 05:00
Last modified 18-10-2016 - 02:27
References
Vulnerable Configurations
  • cpe:2.3:a:slashcode.com:slash:*:*:*:*:*:*:*:*
    cpe:2.3:a:slashcode.com:slash:*:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bugtraq
  • 20020911 Re: slashdot / slashcode disclosing passwords
  • 20020911 slashdot / slashcode disclosing passwords
  • 20020917 Re: slashdot / slashcode disclosing passwords
cert-vn VU#603945