Design/Logic Flaw

2010-04-2016:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

login_screen.tcl in aMSN (aka Alvaro’s Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.

CPENameOperatorVersion
amsneq0.91
amsnle0.97
amsneq0.92
amsneq0.96
amsneq0.94
amsneq0.83
amsneq0.90
amsneq0.95
amsneq0.93

Name	Operator	Version
amsn	eq	0.91
amsn	le	0.97
amsn	eq	0.92
amsn	eq	0.96
amsn	eq	0.94
amsn	eq	0.83
amsn	eq	0.90
amsn	eq	0.95
amsn	eq	0.93

References

amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960&r2=10259&pathrev=10259

sourceforge.net/project/shownotes.php?release_id=610067

www.amsn-project.net/forums/index.php?topic=5317.0