Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-3856
cve-2005-3856
krusader
url
password
vulnerability
cleartext
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.3%
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
Affected configurations
Node
krusaderkrusaderMatch1.60.0
ORkrusaderkrusaderMatch1.70.0_beta1
| CPE | Name | Operator | Version |
|---|---|---|---|
| krusader:krusader | krusader | eq | 1.60.0 |
| krusader:krusader | krusader | eq | 1.70.0_beta1 |
Related
ubuntucve
ubuntucve
CVE-2005-3856
2005-11-27 00:00:00
nvd
nvd
CVE-2005-3856
2005-11-27 20:03:00
debiancve
debiancve
CVE-2005-3856
2022-10-03 16:22:38
cvelist
cvelist
CVE-2005-3856
2022-10-03 16:22:38
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.3%
Related for CVE-2005-3856