CVE-2022-3206
Assigner: WPScan
Published: 2022-10-17T00:00:00
State: PUBLISHED
title: Passster < 3.5.5.5.2 - Insecure Storage of Password
problemTypes: descriptions: description: CWE-522 Insufficiently Protected Credentials
type: CWE
descriptions: description: CWE-319 Cleartext Transmission of Sensitive Information
type: CWE
affected: vendor: Unknown
product: Passster
versions: status: affected
versionType: custom
version: 0
lessThan: 3.5.5.5.2
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
credits: value: Raad Haddad of Cloudyrion GmbH
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator