Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2006-2481
HistoryJul 31, 2006 - 7:04 p.m.

Cross site scripting

2006-07-3119:04:00
PRIOn knowledge base
www.prio-n.com
2

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.7%

JSON

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).

CPENameOperatorVersion
esxeq2.0
esxeq2.0.1
esxeq2.1.2
esxeq2.5
esxeq2.5.2
esxeq2.1.1
esxeq2.1

Related

cve 3
securityvulns 3
cve
cve
CVE-2006-2481
2006-07-31 19:04:00
CVE-2005-3619
2005-12-31 05:00:00
CVE-2005-3618
2005-12-31 05:00:00
securityvulns
securityvulns
Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue
2006-06-02 00:00:00
Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue
2006-08-02 00:00:00
VMSA-2006-0004 Cross site scripting vulnerability and other fixes
2006-08-02 00:00:00

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.7%

JSON
Related for PRION:CVE-2006-2481
cve3securityvulns3