Plaintext Storage of Usernames and Passwords in Datalex PLC BookIt! Consumer Cookie

CVE-2002-0933 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

Learn more about our User Device Pen Test.