Approved changes feed: RSS · Atom

cpe:2.3:a:plone:plone_cms:2.0.5:*:*:*:*:*:*:*

part: a version: 2.0.5 update: *

VendorPlone (20065100-5fec-5b5e-bb46-a6d4673848e0)
ProductPlone Cms (7f8a9fea-4c0c-5efb-aa28-6788af52a61f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/plone/plone purl2cpe 2026-06-01 10:16:04.196695
pkg:pypi/plone purl2cpe 2026-06-01 10:16:04.196697

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1394 vulnerable 2026-06-03 14:28:40.610652 Details available
Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network.
Published: 2008-03-20T00:00:00.000Z
Updated: 2024-08-07T08:17:34.858Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.