Skip to content
High Published: Dec 31, 2001 Modified: Apr 03, 2025

CVE-2001-1536

7.5 CVSS Score High
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Export CVE-2001-1536 Data:
Share:
Link copied!

Description

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Affected Software Configurations

  • a audiogalaxy audiogalaxy - * * * * * * *

Weaknesses (CWE)

  • CWE-312