Lucene search
WPScanCVELIST:CVE-2022-3206HistoryOct 17, 2022 - 12:00 a.m.
CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password
2022-10-1700:00:00
WPScan
www.cve.org
2
passster plugin
wordpress
insecure storage
base64 encoding
cookie leakage
password risk
EPSS
0.002
Percentile
58.7%
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named “passster” using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Passster",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.5.5.5.2"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
patchstack
patchstack
wpvulndb
wpvulndb
Passster < 3.5.5.5.2 - Insecure Storage of Password
2022-09-21 00:00:00
cve
cve
CVE-2022-3206
2022-10-17 12:15:10
nvd
nvd
CVE-2022-3206
2022-10-17 12:15:10
prion
prion
Default credentials
2022-10-17 12:15:00