CVE-2004-2578 | BDVDB-2026-13593 Detail

Description#

phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/10895
http://www.osvdb.org/8354
http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/
https://exchange.xforce.ibmcloud.com/vulnerabilities/16970

Exploit#

No public exploit known

History#

Version 12005-11-28Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.