Lucene search
PRIOn knowledge basePRION:CVE-2008-1396HistoryMar 20, 2008 - 12:44 a.m.
Authentication flaw
2008-03-2000:44:00
PRIOn knowledge base
www.prio-n.com
1
Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.
Related
cve
cve
CVE-2008-1396
2008-03-20 00:44:00
osv
osv
Plone credentials stored in session cookie
2022-05-01 23:39:47
cvelist
cvelist
CVE-2008-1396
2008-03-20 00:00:00
nvd
nvd
CVE-2008-1396
2008-03-20 00:44:00
ubuntucve
ubuntucve
CVE-2008-1396
2008-03-20 00:00:00
github
github
Plone credentials stored in session cookie
2022-05-01 23:39:47