CVE-2006-5161 - IBM Client Security Password Manager stores and distributes saved passwords based upon the title of

CVE-2006-5161

Summary

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.

References

http://securityreason.com/securityalert/1681
http://www.securityfocus.com/archive/1/447577/100/0/threaded
http://www.securityfocus.com/bid/20308

Vulnerable Configurations

cpe:2.3:a:ibm:client_security_password_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:client_security_password_manager:*:*:*:*:*:*:*:*

CVSS

Base:	6.4 (as of 17-10-2018 - 21:41)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:N

refmap via4

bid	20308
bugtraq	20061003 Security flaw in IBM Client Security Password Manager
sreason	1681

Last major update

17-10-2018 - 21:41

Published

05-10-2006 - 04:04

Last modified

17-10-2018 - 21:41