cbcvebase.
CVE-2014-2212
published 2014-04-01

CVE-2014-2212: The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of…

PriorityP421medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.25%
65.7th percentile
The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.

Affected

24 ranges
VendorProductVersion rangeFixed in
posh_projectposh<= 3.3.0—
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
posh_projectposh——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.