Description
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information.
References
- http://echo.or.id/adv/adv03-y3dips-2004.txt
- VU#586720 third-party-advisory
- jetbox-one-plaintext-password(16898) vdb-entry
- 8325 vdb-entry
- 10858 vdb-entry
- 20040804 vulnerabilities in JetboxOne CMS mailing-list
- 12230 third-party-advisory