CVE-2000-0034

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.6%
top 30.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 22
Latest updateApr 30

Description

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-237w-fwrp-rqvw: Netscape 42022-04-30
CVEList
CVE-2000-0034: Netscape 42000-07-12
CVE-2000-0034 (MEDIUM CVSS 5) | Netscape 4.7 records user passwords | cvebase.io