Vulnerability in Six Apart Movable Type

CVE-2005-4689

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.

EPSS: 0.012 (64.5th percentile) — read the EPSS interpretation.

Affected products

Six_apart Movable_type — versions 3.16
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_CONFIRM)