1 matches found
CVE-2012-3359: Undefined Security Weakness
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect...
3.7CVSS5.8AI score0.0034EPSS
SaveExploits0References2
20