Lucene search
HistorySep 30, 2005 - 10:05 a.m.
CVE-2005-3112
cve-2005-3112
macromedia
breeze 5.0
password storage
plaintext
database
vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.8%
The “reset password” feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords.
Affected configurations
Node
macromediabreezeMatch5
| CPE | Name | Operator | Version |
|---|---|---|---|
| macromedia:breeze | macromedia breeze | eq | 5 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.8%
Related for CVE-2005-3112