CVE-2005-3112

Published Sep 30, 2005

Last updated 6 hours ago

Overview

Description: The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords.
Source: cve@mitre.org
NVD status: Deferred

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:macromedia:breeze:5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "95AF9CF0-164D-41D0-8832-27E857181116"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References