CVE-2005-3429

medium

Description

Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/22906

http://www.osvdb.org/22682

http://securitytracker.com/id?1015117

http://marc.info/?l=bugtraq&m=113053680631151&w=2

Details

Source: Mitre, NVD

Published: 2005-11-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00649